sagsoz06/widget

Its MIT license, matching source repository, and tiny dependency surface make the package easy to inspect. The lack of tests and security scanning leaves more verification work for your team.

Latest 2.2.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in April 2017, with no releases in the last 12 months despite the package being nearly ten years old. This is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.

Package scaffolding

The package includes a short README, but neither the artifact nor repository has tests or a changelog. Missing tests and changelogs are not packaging requirements, though the lack of repository tests reduces maintenance transparency for this library.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no external sign of sustained adoption.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. The build setup is adequate while security coverage is limited.