sandstorm/mxgraph

The package is licensed, documented, and has only three runtime dependencies. Its organization-backed repository is not archived and matches the package, but no commits were recorded in the last three months; pin version 4.0.2 while maintenance resumes.

Latest 4.0.2

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since December 2016 and has 12 releases, but only one release appeared in the last 12 months and the median interval is about 327 days. The recent 4.0.2 release shows the project is not abandoned, but maintenance is infrequent.

Repo commit activity

No commits and no active maintainers were recorded during the last three months. This is a meaningful maintenance concern, even though the package had a recent release.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while one issue and two pull requests remain open. This supports the picture of currently quiet maintenance.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of a defect in the release.

Security policy

The repository has no security policy. That leaves vulnerability-reporting expectations unclear and modestly reduces project transparency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
neos/neos Version ^9.0 \|\| dev-master	—	—
sandstorm/lazydatasource Version ^3.0 \|\| dev-master	—	—
neos/nodetypes-basemixins Version >=3.0.0 \|\| dev-master	—	—