thelia/team-module

It has a clear LGPL license, a usable README, and organization-backed source. The small dependency set and absence of install scripts reduce adoption friction, but security scanning and a security policy are missing.

Latest 1.1.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was published in September 2016 despite a healthy early release cadence. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since 2016. Organization backing does not compensate for absent observed maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no open work is visible. This supports the conclusion that the project is dormant, although issue volume alone is not decisive.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling is present. The missing scanner is a modest transparency and maintenance weakness, not evidence of unsafe behavior by itself.

Security policy

The repository has no security policy. For a dormant package this leaves vulnerability-reporting expectations unclear, adding a maintenance and transparency concern.