shyaminayesh/dimp

The package is small, licensed, documented, tested, and has only one runtime dependency. Its repository is not archived, but it has no visible security policy.

Latest v0.0.1-beta

Packagist

30%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about 7 years and 8 months ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, while its last push was in January 2019. This confirms that the stale registry history reflects inactive development.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of community adoption or review.

Repo tooling

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest hygiene gap, not the primary risk compared with the prolonged inactivity.

Security policy

The repository has no security policy. For a package that wraps an external API, this weakens transparency around reporting and handling security issues.