sonarsoftware/importer

The package includes a clear README, tests, release notes, and matching MIT licensing, with organization backing and no install-time scripts. Repository security scanning is absent, so maintenance and transparency would need to be supplied by a successor.

Latest 4.0.5

Packagist

20%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that the release should not be adopted as an active dependency.

Release history

The package has 28 releases since February 2016, but its latest release was in August 2018 and it had no releases in the last 12 months. The earlier regular cadence does not compensate for this prolonged release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with an inactive project. This materially increases abandonment and compatibility risk.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not a standalone reason to reject the package.

Security policy

The repository has no security policy. This reduces the visible process for reporting and handling vulnerabilities, especially for an importer that handles API credentials and imported data.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon Westlake

Direct Dependencies

Dependency	Last Release	Score
nesbot/carbon Version ^1.21	—	—
predis/predis Version ^1.1	—	—
league/climate Version ^3.2	—	—
leth/ip-address Version ^1.1	—	—
vlucas/phpdotenv Version ^2.2	—	—