ova777/dao

The small codebase is easy to inspect, with an MIT license, README, and no install-time scripts. Its single maintainer and minimal testing and security tooling leave little evidence of ongoing support.

Latest v1.0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2016, and there have been no releases in nearly ten years. This strongly raises abandonment risk despite the package having two historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is strong evidence that maintenance has stopped.

Repo popularity

The repository has 1 star and no forks, providing little community evidence or backup around this dependency. Popularity is only supporting evidence, but it does not offset the inactivity.

Repo tooling

Composer is used for builds, which is appropriate, but no security-scanning tooling is present. The missing scanning is a modest hygiene gap rather than a standalone adoption blocker.

Security policy

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern for an otherwise very small, inactive package.