Package Health/techlify/asset-management

techlify/asset-management

Risky to depend on: this package has had only one release, published over seven years ago, and its linked repository stopped receiving updates shortly afterward. The repository also does not identify or document this package, creating uncertainty about whether it is the intended source.

Latest 0.2.0

Packagist

35%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

There is only one release, and no release has been published in more than seven years. That strongly suggests abandonment and leaves no demonstrated maintenance cadence.

Repository archived

The repository is not archived, but its last push was more than seven years ago, so the active status does not compensate for the long period without updates.

Repo package mention

The repository name does not match the package name and its README does not mention the package. This weakens source transparency and raises uncertainty about whether the repository actually backs this release.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. This is a modest transparency gap, secondary to the package's much more significant maintenance concerns.

Security policy

The repository has no security policy. For a package that can be integrated into applications, this makes vulnerability reporting less clear, although it is less serious than the lack of ongoing maintenance.