Package Health/small4ange/katka-v-composer

small4ange/katka-v-composer

The package has no repository tests or security policy, and its three releases arrived within minutes. The repository is not archived and the artifact includes a README and license, but one contributor made all three recent commits.

Latest 1.0.2

Packagist

56%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package file tree

The artifact contains 37 files, but the linked repository contains only three files and no README or tests; most of the artifact is a vendored dependency. That makes the package's own source and release process less transparent.

Release history

The package is only 50 days old, with three releases published within roughly 19 minutes and no demonstrated long-term maintenance cadence. This limited history leaves abandonment risk unclear.

Repo bus factor

One contributor made 100% of the three recent commits, leaving no demonstrated backup maintainer. The repository owner is an individual rather than an organization, so this concentration is a genuine continuity concern.

Repo commit activity

The repository has only three commits in the last three months, all concentrated in the observed period. This shows some activity but little evidence of sustained maintenance.

Security policy

The repository has no security policy. For a small package this is a modest transparency gap, but it provides no documented route for reporting or handling vulnerabilities.