opensrs/osrs-toolkit-php

The package is clearly licensed, tested, and tied to a matching organization-owned repository with release notes. Its lack of a security policy and security scanning leaves important transparency gaps.

Latest 4.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in February 2016, with no registry release in about 10 years. The repository was pushed in 2024, which provides some compensating evidence but does not show a current release cadence.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Its 2024 push shows it is not wholly abandoned, but current maintenance capacity is weak.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 16 issues and 11 pull requests remain open. This suggests limited recent project responsiveness.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. That leaves dependency and source-risk checks less transparent.

Security policy

The repository has no security policy, so users have no documented process for reporting vulnerabilities or understanding security response expectations.