psenna/dingo-api

The package has a clear BSD-3-Clause license, a usable README, repository tests, and no install-time scripts or deprecation. Its long inactivity and unclear repository association make long-term maintenance and release provenance a concern.

Latest 2.0.2

Packagist

38%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than seven years: its latest release was December 2018, with zero releases in the last 12 months. This is strong evidence of abandonment for a framework-oriented API dependency.

Repo package mention

The linked repository is named api rather than dingo-api and neither its README nor repository metadata mentions the package name. That weakens confidence that the repository clearly represents this package.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest supply-chain hygiene gap rather than evidence that the release is unsafe.

Repository archived

The repository is not formally archived, but its last push was in December 2018, matching the stale registry release history. The active flag does not compensate for the absence of recent source changes.

Security policy

The repository has no security policy. For an API framework, this reduces transparency around vulnerability reporting, though it is secondary to the much older maintenance gap.