phix/injectables

Risky to adopt: this library has had no release or repository activity for nearly 13 years. It includes tests and has no deprecation or install-time scripts, but its long-term abandonment risk and missing consumer documentation are substantial.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published nearly 13 years ago, with no releases in the last 12 months. This is strong evidence of stagnation despite the package not being formally deprecated.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with the last push occurring nearly 13 years ago. The repository is not archived, but that does not compensate for the prolonged inactivity.

Package scaffolding

The artifact contains tests, and the repository also has tests, which provides some evidence of basic project discipline. However, the published package has no README, leaving consumers without important integration guidance for a library.

Repo popularity

The repository has zero stars and forks and one watcher, providing little supporting evidence of a maintained user or contributor community. Low popularity alone is not decisive, but it offers no compensation for the inactivity.

Repo tooling

The repository uses Composer as its build tool, but no security scanning tools are present. This is a modest transparency gap, not a decisive concern for this small, old package.