theme/cssvariables

Documentation and a changelog are present, and the repository is not archived. However, recent commit activity is absent and the project has no security scanning, so maintenance confidence is limited.

Latest 0.2.3

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was published in December 2019, with no releases in the last 12 months. This is a substantial freshness concern for a package that may need compatibility updates.

Repo commit activity

No commits and no active maintainers were recorded in the last three months. Although the repository was pushed in February 2026, the recent activity measure still indicates limited ongoing development.

Repo issue activity

There are eight open pull requests but no issues or pull requests were merged in the last month. The backlog and lack of recent merges weaken evidence of responsive maintenance.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, especially for a package with no recent release cadence.