studiomitte/replaceli

Its clear license, focused dependency, and organization-backed repository support straightforward adoption. The small artifact has no tests, security policy, or security scanning, limiting confidence in ongoing quality checks.

Latest 0.1.1

Packagist

53%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in August 2020, with no release in nearly six years. That is strong evidence of stalled maintenance for a dependency, although the narrowly scoped package may need few changes.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.

Package scaffolding

The artifact includes a usable README, while absent tests and changelog are normal for published package contents and are not gaps here. The repository also has neither, so there is limited evidence of documented quality practices.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. This is a modest transparency and assurance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. For a small extension this is a minor concern, but it reduces maintenance transparency.