Package Health/skunexus/dependency-confusion-patch

skunexus/dependency-confusion-patch

This repository was created to reserve a namespace and eliminate dependency confusion attack. Do not use it.

Latest 1.0.0

PackagistMIT

20%

Total Score

critical

A single 2021 release and no repository activity since then make this namespace-reservation package unfit to adopt.

Using this package? Scan for Free

Health Score Breakdown

Release history

This package has one release, published in February 2021, and no releases in the last 12 months. That long absence of releases is strong evidence that it is not maintained as a dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository's last push in February 2021. This indicates sustained abandonment rather than active maintenance.

Package file tree

The artifact contains only README.md and composer.json, matching the linked repository exactly. This is transparent and consistent with a namespace-reservation package, but confirms there is no substantive implementation to depend on.

Repo popularity

The repository has zero stars and zero forks, with one watcher. Popularity is not decisive by itself, but these counters provide no supporting evidence of adoption or community review.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a hygiene gap, though it is secondary to the package's lack of ongoing development.