serluck/phpwhois

The package is well documented, licensed, tested, and has a matching source repository with a small dependency footprint. Its repository and registry have shown no meaningful activity for about eight years, and no security policy is provided.

Latest v4.2.6

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in May 2018, with no releases in the last 12 months and only four releases overall. This strongly increases abandonment risk for a library dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the last release being about eight years ago, this is the main ongoing-maintenance concern.

Project backing

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to offset the small maintainer base and long inactivity.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low figures provide little evidence of an active community to compensate for inactivity.

Repo tooling

Composer is used for builds, but no security scanning tool is configured. Build tooling is present, while security-process transparency is limited.