Package Health/palantirnet/phing-drush-task

palantirnet/phing-drush-task

The repository is active enough to remain unarchived and provides a README, release notes, and a license. However, the package has not released since October 2022, has no recent commits, and appears to borrow the identity of a much more established package.

Latest 2.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is identified as borrowing the identity of palantirnet/drupal-rector, with an explicit lookalike signal and much lower monthly downloads and release count. Consumers may have intended the established lookalike instead, making this a severe adoption risk.

Release history

The latest registry release was October 2022, with no releases in the last 12 months despite the package being several years old. This indicates a substantial release-maintenance gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of recent releases, this raises abandonment risk.

Repo tooling

The repository uses Composer and Phing for builds, but reports no security-scanning tools. The missing scanning is a hygiene weakness rather than a standalone reason to reject the package.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap for a dependency used in build workflows.