rezzza/processone-bundle

The small dependency surface, MIT licensing, README, and tests make the package straightforward to inspect. Its lack of security policy and minimal community activity add ongoing ownership risk.

Latest 1.2.0

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than 10 years: its latest release was December 16, 2015, despite six releases overall. This is strong evidence of abandonment for a dependency that may need compatibility or security fixes.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no open work remains. Combined with the inactive commit history, this suggests little active support.

Repo popularity

The repository has only 3 stars and 1 fork, so there is limited visible community adoption or backup ownership. Popularity is supporting evidence, but it reinforces the maintenance concern here.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The package's age and lack of recent activity make this gap more consequential.