srph/compose
It includes a README, tests, and no runtime dependencies. The nearly 11-year-old release has no recent maintenance, making future fixes and compatibility uncertain.
42%
Total Score
0
100
58
Health Score Breakdown
This is the package's only release, published nearly 11 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, despite the package's small scope.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates a dormant project rather than an actively maintained dependency.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. For this small dormant package, that is a modest transparency and maintenance gap.
The repository is not archived, which leaves the project technically maintainable, but its last push was nearly 11 years ago and does not offset the long inactivity.
The assessed version is v0.1.0, so it has not reached a stable major release. The absence of newer versions reinforces the maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 srph |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.