ristek/sso

Risky to adopt: the latest registry release was over nine years ago, and the repository has had no commits in over six years. It is not archived and has a usable README, but the long inactivity makes maintenance and compatibility a significant liability.

Latest 0.5.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over nine years, despite nine releases earlier in its history. This long gap is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, with its last push over six years ago. The absence of recent development is not offset by the repository merely remaining available.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with two issues and one pull request still open. This reinforces the broader picture of an inactive project.

Repo tooling

The repository uses Composer, but no security scanning tools are reported. This modestly reduces supply-chain hygiene evidence, while the absence of workflow tooling is not itself a severe risk.

Security policy

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is secondary to the package's prolonged inactivity.