Package Health/rogeecn/uniquewith-validator

rogeecn/uniquewith-validator

Usable with caveats: the package is licensed, documented, correctly backed by a matching repository, and not deprecated or archived. However, it has had no release for nearly six years and no recent commit activity, so compatibility and maintenance risk are significant.

Latest 3.5.0

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 26 releases since January 2014, but its latest release was in November 2020 and there have been no releases in the last 12 months. This long release gap materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates currently inactive maintenance and raises the risk of unresolved compatibility issues.

Project backing

The registry namespace and repository owner match, and the repository is user-owned rather than organizationally backed. The matching ownership supports provenance, although the single-owner structure offers limited maintenance redundancy.

Repo tooling

The repository uses Composer as its build tool, which is appropriate for a Packagist package. No security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a small validation library this is a hygiene gap rather than evidence that the release is unsafe, but it weakens the project's vulnerability-reporting transparency.