stwessl/form

The codebase is small and has a single runtime dependency, which limits maintenance complexity. The linked repository remains identifiable and unarchived, but its lack of security tooling leaves little ongoing assurance.

Latest 1.0-stable

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has had only one release, published about 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release gap and reducing confidence in ongoing maintenance.

License

Neither the package nor the linked repository contains a declared or detected license file. This creates a material legal and transparency concern for adoption.

Package scaffolding

The package includes a README, but it is only 6 characters long and provides essentially no integration guidance. Missing tests and a changelog are normal for published artifacts, while the GitHub release provides some release traceability.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. For a small library this is a modest assurance gap rather than evidence of unsafe behavior.