rgeraads/exchangerate

The project includes tests, a README, and a license file, but its declared proprietary license conflicts with the MIT license found in the artifact. No security policy or scanning tooling is present, adding uncertainty for a long-unmaintained dependency.

Latest 2.0

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 8 years ago, with only two releases overall and none in the last 12 months. That is strong evidence of abandonment for a library that retrieves external exchange-rate data.

Repo commit activity

The repository has had no commits or active maintainers in the last 3 months, and was last pushed about 7 years ago. The lack of recent development materially increases maintenance and compatibility risk.

License

The artifact contains an MIT license file and the repository also has a license file, so the release is licensed. However, the manifest declares it as proprietary while the detected license is MIT, creating a material licensing ambiguity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, especially alongside the absence of recent activity.

Security policy

The repository has no security policy. For a package that contacts external exchange-rate services, this leaves vulnerability-reporting and maintenance expectations unclear.