psecio/uri

Risky to adopt for new projects: it has had no release or repository activity for about 8 years. The package is small, licensed, tested, dependency-free, and not deprecated or archived, but its long abandonment gap outweighs those strengths.

Latest 0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 8 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, although the package is not marked deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push occurring about 8 years ago. No provided signal shows ongoing maintenance to compensate for this gap.

Security policy

The repository has no security policy. For a library focused on signing and validating URLs, this is a transparency gap, though the absence of workflows and runtime dependencies limits the practical concern.