syntafin/discordwidget

It has a clear README, MIT licensing, and a small dependency surface. The workflow uses two unpinned actions, and the lack of a security policy reduces transparency. The package should be treated as a maintenance liability for new projects.

Latest 1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only one release exists, published about five years ago, with none in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with the old release history, this materially increases abandonment risk.

Repo issue activity

There are two open issues and no new or closed issues in the last month, showing little evidence of active issue handling.

Repo tooling

Composer is used for builds, but no security scanning tool is configured. This is a modest transparency and maintenance gap for a package intended for application dependencies.

Repository archived

The linked repository is not archived, but it was last pushed about four years ago; the stale timestamp reinforces the separate maintenance concerns without making the repository formally unavailable.