parsidev/theme

The small dependency surface and clear MIT licensing reduce integration friction. Pinning 1.0.1 is prudent because maintenance and security evidence have effectively stopped.

Latest 1.0.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, and none were published in the last 12 months; the latest release was in September 2020, nearly six years ago. This is strong evidence of abandonment risk, though the package is not deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly six-year release gap. No newer activity compensates for this maintenance concern.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no community-maintenance cushion.

Repo tooling

Composer is used for the build, but no security-scanning tools are present. The missing scanning is a hygiene gap that adds to the package's limited maintenance evidence.

Security policy

The repository has no security policy, leaving no documented process for handling vulnerability reports. This matters more for a framework integration package than it would for a purely internal utility.