Package Health

settermjd/laminas-openstreetmap

Clear licensing, tests, and a matching source repository make the package easy to inspect and integrate. Its small dependency set and clean workflow help, but the low version and limited project activity leave maintenance uncertain.

Latest 0.0.3PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package has had only three releases, all clustered in April 2023, with no releases in the last 12 months and roughly three years since the latest release. This is a substantial maintenance concern, though the repository is not archived.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years. The non-archived status and available tests provide only limited compensation.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. The absence of scanning is a hygiene gap rather than evidence of abandonment, given the available tests and other repository controls.

Version stabilitycaution

Version 0.0.3 is not a stable major release, so the API may still change and the package has limited maturity evidence. It is not marked as a prerelease, which partly offsets the concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Matthew Setter

Direct Dependencies

DependencyLast ReleaseScore
shrikeh/teapot
Version ^2.3
—
—
guzzlehttp/psr7
Version ^2.4
—
—
guzzlehttp/guzzle
Version ^7.5
—
—
laminas/laminas-hydrator
Version ^4.13
—
—
laminas/laminas-eventmanager
Version ^3.10
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform