openemr/mustache

The source includes tests, a changelog, and clear MIT licensing. Its single runtime dependency and organization backing reduce adoption friction, but the package should be treated as effectively frozen.

Latest v2.15.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 4 years ago, with no releases in the last 12 months. The 28-release history shows prior maturity but not current maintenance.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with a project whose last push was about 4 years ago. This materially increases abandonment risk.

Repo popularity

The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional community-maintenance signal.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, while the build tooling supports reproducible project structure.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency, especially for a library used in applications, though it does not by itself show that the release is unsafe.