rednose/cmis-phplib

The repository has no security scanning and no security policy, while its popularity is minimal. Composer build tooling and the absence of install scripts are reassuring, but they do not offset the long-term inactivity.

Latest v1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's extended release inactivity. No provided signal shows recent maintenance capacity.

Package scaffolding

The published artifact has no README, tests, or changelog, and the repository has none of these either. For a small library, this weakens transparency and makes future maintenance harder.

Repo popularity

The repository has zero stars and only two forks, providing little evidence of broad community adoption or external review. Popularity is supporting evidence, but this reinforces the other maturity concerns.

Repo tooling

Composer is used as the build tool, which supports reproducible package handling, but no security scanning tools are present. The missing scanning is a maintenance and hygiene concern rather than evidence of maliciousness.