theiconic/config

It includes tests, release notes, a clear MIT license, and a matching organizational repository. Its long inactivity and lack of security scanning leave future fixes and maintenance uncertain.

Latest v1.0.5

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 8 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, even though the package has 12 historical releases.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. No provided activity signal compensates for this inactivity.

Repo issue activity

There is one open issue and no issue or pull-request activity in the last month. This is consistent with the broader inactivity signal, but is not independently severe.

Repo popularity

The repository has 3 stars and 1 fork, indicating limited adoption. Popularity is only supporting evidence and does not by itself make the package unhealthy.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning reduces maintenance and transparency confidence, though it is not severe on its own.