qumuinc/ulidtypes

MIT licensing, a README, tests, and only two runtime dependencies make the small plugin straightforward to inspect and integrate. Missing security tooling and a security policy leave its maintenance practices less transparent.

Latest v0.0.5

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has five releases but none in the last 12 months; its latest release was published in October 2021, about four years and eleven months ago. This is strong evidence of a stalled release process, with no newer release evidence to compensate for it.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the old latest release. The linked repository is not archived, but that does not offset the absence of recent work.

Repo popularity

The repository has zero stars, forks, and watchers, providing no community signal to compensate for the thin maintenance history. Popularity is only supporting evidence, so this reinforces rather than determines the abandonment concern.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap, especially alongside the lack of recent activity.

Security policy

The linked repository has no security policy. For a small inactive package this leaves vulnerability reporting and response expectations unclear.