relaxsd/l4-ideal

Its six-file layout, MIT declaration, README, and release notes make the package easy to inspect. It has no install scripts and its repository matches the package, but adopting it still carries substantial maintenance risk.

Latest v1.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both on 8 November 2016, with no releases in about 9 years and 10 months. This is strong evidence of abandonment for a dependency that may need compatibility updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in 2016. This leaves no observed current maintenance capacity.

Repo popularity

The repository has zero stars and forks and only one watcher, offering little supporting evidence of community adoption or review. Popularity is secondary, but it does not offset the inactive maintenance record.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is reported. This is a modest hygiene gap rather than evidence of unsafe behavior.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though the small package scope limits its weight.