pbxg33k/musicbrainz

The repository still contains tests, a substantial README, matching package references, and clear MIT licensing. It lacks security scanning and a security policy, adding a modest transparency gap.

Latest v0.3.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about nine years, with five releases concentrated in April 2016 and no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed ongoing maintenance.

Repo issue activity

Three issues and two pull requests remain open, while none were created, closed, or merged in the last month. This reinforces the lack of recent project activity.

Repo tooling

Composer is used as the build tool, but no security-scanning tools are configured. The build setup is appropriate, while the missing scanning reduces maintenance transparency slightly.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. This is a modest transparency gap, not evidence of a severe dependency risk by itself.