openlss/lib-config

The small dependency set, included tests, README, and matching source repository make the package easy to inspect. Its license mismatch needs clarification, while the long period without maintenance makes future compatibility and support uncertain.

Latest 0.0.15

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The manifest declares LGPL-3.0+, but the artifact license file was detected as GPL-3.0. Both the artifact and repository contain license files, but the mismatch should be resolved before adoption.

Release history

The latest release was in September 2013, with no releases in the last 12 months. Roughly 13 years without a release is strong evidence of abandonment risk, despite the package having 15 releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history and indicating no current maintenance capacity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For this small, long-inactive project, the missing scanning is a minor hygiene gap rather than the main concern.

Security policy

The repository has no security policy. This reduces vulnerability-reporting transparency, though the package's prolonged inactivity is the more significant concern.