php-etl/contracts

The source is small and has a focused dependency surface, with organizational ownership and no install-time scripts. Its single release is from 2020, repository activity stopped in 2022, and it lacks tests, a README, and a security policy, making long-term support uncertain.

Latest 0.1.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published over six years ago, with no releases in the last 12 months. This is strong evidence of a dormant dependency rather than an actively maintained one.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in 2022. That suggests maintenance has effectively stopped.

Package scaffolding

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README reduces transparency for a library consumers must integrate.

Repo tooling

The repository uses Composer for builds, but it reports no security-scanning tools. The standard build tooling is positive, while the missing scanning is a modest hygiene gap.

Security policy

The linked repository has no security policy. This is a transparency and response-process gap, though it is less serious than the package's prolonged lack of maintenance.