tdt/core

It has a stable major version, clear AGPL licensing, tests, and release notes for this patch. Organization backing and a repository that matches the package add transparency, but the project still looks difficult to rely on for new development.

Latest v7.0.1

Packagist

48%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health checks

Release history

The package has 34 releases since 2013, but none in the last 12 months; its latest release was about 6 years and 6 months ago. This strongly raises abandonment risk despite its historically regular release interval.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old last release, this is strong evidence that maintenance has stopped.

Lifecycle scripts

The package declares post-create, post-install, post-update, and pre-update Composer scripts, increasing install-time behavior and review requirements. Their presence alone does not establish a severe problem, but it is a supply-chain hygiene concern.

Repo issue activity

There are 38 open issues and no new or closed issues or pull requests in the last month, indicating unresolved work alongside ongoing inactivity.

Repo tooling

Composer is used as a build tool, providing ordinary project build structure, but no security-scanning tools were detected. That is a modest transparency and maintenance gap for a web framework component.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
tdt/input Version dev-master	—	—
ml/json-ld Version 1.*	—	—
doctrine/dbal Version 2.5.12	—	—
nesbot/carbon Version ~1.14	—	—
phayes/geophp Version dev-master	—	—