sunsgne/rate-limit

Risky to adopt because the package has had no release for over four years and no repository commits for over three years. It is not deprecated or archived, and the README and package structure are usable, but maintenance appears abandoned.

Latest 1.1.2

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 14 releases but none in the last 12 months, with the latest release more than four years ago. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being over three years ago. This materially increases the risk that defects and compatibility problems will remain unaddressed.

Project backing

The package and repository are owned by individual accounts rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance history.

Repo popularity

The repository has only 2 stars and 1 fork, providing little community evidence or backup support. Low popularity alone is not disqualifying, but it offers no meaningful compensation for the stale maintenance signals.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and hygiene gap, though it is less significant than the prolonged inactivity.