pinga/cache

It has an MIT license, tests, a readable README, and no install-time scripts. The linked repository matches the package and is not deprecated, but its small footprint offers little evidence of ongoing support.

Latest v0.2

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all close together, with no release in over three years. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That is a modest hygiene gap rather than evidence that the package is unsafe to depend on.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is secondary to the much stronger maintenance concern.

Version stability

The latest release is v0.2 rather than a stable major version, so the public API and behavior may still change while the project has no recent activity to demonstrate maturity.