tiborsulyan/autologout

The package is clearly identified, permissively licensed, and has a small, understandable dependency footprint. Its unresolved TODOs, absent security policy, and lack of security scanning add transparency and maintenance concerns.

Latest 0.2.7

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than five years, and there were zero releases in the last 12 months. This is strong evidence of abandonment risk despite its 11 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo tooling

The project uses Composer for builds, but no security-scanning tools were detected. The absence is a modest supply-chain hygiene concern, though it does not by itself show unsafe code.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for an extension that manages user sessions.

Version stability

Version 0.2.7 is not a stable-major release, so the package offers less maturity assurance than a 1.x release. It is not marked prerelease, which partially offsets that concern.