rumur/wputils-contracts

The MIT license and single runtime dependency keep the package straightforward to adopt. It lacks a security policy and automated security scanning, while its tiny artifact provides no README for integration guidance.

Latest 0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has made only one release, on February 9, 2020, with none in the following six years. That is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of releases since February 2020 and indicating no current maintenance capacity.

Package scaffolding

The artifact has no README, tests, or changelog, which limits integration guidance and verification. The GitHub release notes document the initial release, and the package is a small contract-only library, partly compensating for the missing test and changelog files.

Repo tooling

Composer is used for the build, but the repository reports no security-scanning tooling. This weakens routine detection of dependency and build risks.

Security policy

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.