speakol/php-kinsumer

The package is clearly licensed, has a matching organization-owned repository, and uses a modest dependency set without install-time scripts. Its minimal documentation and lack of security tooling leave limited evidence beyond the long maintenance gap.

Latest v1.0.5

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over 4 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, despite six releases establishing some initial history.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history and indicating no current maintenance activity.

Repo popularity

The repository has 0 stars, 1 fork, and 2 watchers, providing little supporting evidence of broad adoption or community visibility. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning is a hygiene gap rather than evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is secondary to the maintenance evidence.