pdir/manifest-generator

It has a matching repository, MIT licensing, a tiny dependency surface, and release notes. The project has no security-scanning tooling, which limits ongoing verification.

Latest 1.0.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both in July 2021, and none in the last 12 months. This long period without published maintenance raises abandonment concerns, although the stable 1.0.1 release remains available.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the package having been inactive since July 2021. This is a meaningful maintenance and abandonment concern.

Repo popularity

The repository has one star and no forks, providing little community evidence or external support. Popularity is only supporting evidence, so this modestly reinforces rather than determines the caution.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. For a small library this is a hygiene gap rather than a severe supply-chain risk.

Security policy

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, though it is less significant for this small package than the lack of recent maintenance.