Package Health/sunnysideup/keep-words-together

sunnysideup/keep-words-together

The package has a clear BSD-3-Clause license, documentation, a changelog, and only one runtime dependency. Its small user base and absent security scanning reduce assurance, while the repository shows no recent commit activity despite a long release gap.

Latest 2.0.0

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

The registry lists one publishing maintainer. That is a modest continuity risk for a user-owned project, but it is only supporting evidence and does not outweigh the repository and package evidence by itself.

Release history

Only two releases have been published since April 2020, with no release in the last 12 months and a median interval of about 3.3 years. This is a meaningful maintenance concern for a dependency, though the repository is not archived.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long registry release gap. The non-archived status is a compensating signal, but not enough to remove the maintenance concern.

Repo popularity

The repository has zero stars and forks and only two watchers, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, so this lowers assurance only modestly.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.