qiuyihao/elephant-hub

It includes tests, an MIT license, and one explicit runtime dependency. However, the sole release and repository activity date to August 2018; the README is empty and no security scanning or security policy is present.

Latest 1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in August 2018, and none in the last 12 months. That long period without a new release is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release silence and indicating no visible ongoing maintenance.

Package scaffolding

Tests are present, which provides some project maturity, but the package README is empty and there is no changelog. The missing changelog is normal for a published artifact; the empty consumer documentation remains a minor gap.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. This reduces ongoing oversight, although it is not by itself evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a framework package.