Package Health/remind/confluence-changelog

remind/confluence-changelog

Usable with caveats: the package is licensed, clearly backed by its matching organization repository, and includes tests and a readable artifact. However, it has had no release or commit activity for over four years and provides no security policy, so maintenance should be verified before adoption.

Latest 0.3.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over four years, with five releases overall and none in the last 12 months. This is the strongest indication that maintenance may have stopped.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which prevents this from being an automatic abandonment verdict but does not remove the maintenance concern.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption provides no community-based compensation for the maintenance gap.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The lack of scanning is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.

Security policy

The repository has no security policy. For a package that publishes git history to Confluence and may handle project data, the absence of a documented reporting process is a real maintenance and transparency gap.