runner/consistent-hash

The small, tested codebase has a clear README, MIT license, and no install-time scripts. Its simple dependency profile and matching repository reduce adoption friction, while the absent security policy leaves little additional guidance.

Latest v1.1.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about 8 years, with zero releases in the last 12 months. Its earlier eight-release history shows past activity but does not offset the prolonged stall.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months, with the last repository push in July 2018. This is strong evidence that maintenance capacity has stopped.

Project backing

The package and repository are owned by a user account rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance evidence.

Repo popularity

The repository has only 1 star and 1 fork, providing little evidence of broad community review or adoption. Popularity is supporting evidence, so this reinforces rather than determines the maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The tooling is adequate for the small package, though security oversight is limited.