surda/cssmin

The MIT license, test files, and single runtime dependency make the package straightforward to evaluate and integrate. Missing security policy and scanning leave less evidence for ongoing care.

Latest v1.0.0

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 16 months ago, with no releases in the last 12 months. This limits evidence of ongoing maintenance, though a small stable library may not need frequent releases.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with a project whose latest release was about 16 months ago. This is a meaningful maintenance concern.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of maturity.

Repo tooling

The repository uses Make and Composer, showing basic build tooling, but no security scanning tool is configured.

Security policy

No security policy is present. For a small CSS-minification library this is not severe on its own, but it reduces transparency about vulnerability reporting and response.