postboy/transport-spool

Risky to adopt: this package has had no release or repository activity for over four years. It has tests, a clear license, and an organization-backed repository, but the prolonged inactivity and lack of security policy make maintenance uncertain.

Latest v1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published over four years ago, with no releases in the last 12 months. That leaves compatibility and maintenance uncertain.

Repo commit activity

There have been no commits and no active maintainers in the last three months, consistent with more than four years without a new release. This is the strongest maintenance concern.

Project backing

The repository is owned by an organization, which provides some project backing and makes the single registry maintainer less concerning. However, organizational ownership has not translated into recent activity.

Repo popularity

The repository has no stars, forks, or watchers. Popularity is only supporting evidence, but the absence of any visible adoption reinforces the uncertainty around this inactive package.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. That is a transparency and maintenance gap, though not by itself evidence that the package is unsafe.