techzolab/toolsspfcheck

The MIT license, README, and substantial test suite improve transparency and adoption confidence. The repository is not archived and the package is stable, but negligible visibility and no security policy leave little evidence of ongoing support.

Latest v1.0.2

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had 3 releases, but none in the last 12 months and the latest release was in December 2022, roughly 3 years and 9 months ago. This is strong evidence of stalled maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since the latest release. No provided activity signal compensates for this lack of recent development.

Repo popularity

The repository has 0 stars, forks, and watchers, offering no supporting evidence of adoption or a broader maintenance community. Popularity is only supporting evidence, so this reinforces rather than determines the score.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a transparency and maintenance gap, though it is less serious than the stalled activity.