tholu/php-packer

The small codebase has tests, a README, and no install-time scripts. Its bundled license conflicts with the MIT declaration, and the project shows no recent maintenance activity. The repository is not archived, but that does not offset the long period without releases.

Latest 0.2.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 10 years ago, with no releases in the last 12 months. Although the package had seven releases and a regular early cadence, the prolonged release gap indicates substantial abandonment risk.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and providing no evidence of ongoing maintenance.

License

A license file is present, but it is detected as LGPL-2.1 while the manifest declares MIT. That mismatch creates material uncertainty about the terms under which this release may be used.

Repo issue activity

Only one issue is open and there has been no issue or pull-request activity in the last month. This is consistent with a dormant project, though the small issue count is not independently severe.

Repo tooling

The project uses Composer, which supports reproducible package management, but no security scanning tooling was detected. Given the small and dormant codebase, this is a modest transparency gap rather than a decisive risk.