pluf/mall

The stable major release and MIT license make the package straightforward to adopt, and its repository still matches the package. However, the project has had no release for nearly six years and no commits or issue activity in the measured period, leaving maintenance and compatibility risk high.

Latest 6.0.23

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published nearly six years ago, with zero releases in the last 12 months. Although the package has 95 historical releases and a regular earlier cadence, the prolonged release gap materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the measured three-month period, consistent with the long release gap and providing no evidence of current maintenance capacity.

Repo issue activity

There were no new or closed issues or pull requests in the measured month, while one issue remains open. This does not prove abandonment alone, but it reinforces the lack of recent project activity.

Repo tooling

Composer is used for the build, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence that the release is unfit on its own.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is less significant than the prolonged inactivity.