rodchyn/stash

The package is well documented, licensed, tested, and has a focused dependency set. Its lack of security-policy coverage and negligible repository adoption add smaller concerns.

Latest v0.14.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published more than 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite 18 historical releases.

Repo commit activity

There were zero commits and zero active maintainers during the last three months, consistent with the long period since the last release and indicating serious maintenance risk.

Repo popularity

The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these figures provide little evidence of an active user or contributor community.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.

Repository archived

The linked repository is not archived, but it was last pushed more than 10 years ago. The unarchived status does not compensate for the absence of recent maintenance.