tedivm/fetch

The single registry publisher is backed by an organization-owned repository, and the package includes tests, release notes, and a clear license. Its small dependency surface helps, but missing security tooling leaves less assurance for a library that handles email.

Latest v0.7.2

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases over nearly 14 years, but no registry release in nearly four years; this materially raises abandonment and compatibility risk.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, a strong sign that active development has stalled.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 44 issues and 32 pull requests remain open; this suggests unresolved maintenance demand.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a meaningful assurance gap for a package processing email and attachments.

Repository archived

The repository is not archived, although its last recorded push was in January 2024, which provides only limited evidence of ongoing maintenance.