tihloh/vendo-gateway

Usable with caveats: the release is clearly packaged, documented, tested, and backed by an active unarchived repository. However, it is only 3 days old with 9 releases, has no recorded commit activity over the past 3 months, and lacks security scanning and a security policy.

Latest v1.3.1

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Project backing

The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is limited evidence of institutional maintenance capacity.

Release history

The package is only 3 days old and has published 9 releases, with a median interval of about 5 hours, which indicates an immature and rapidly changing release history.

Repo commit activity

No commits or active maintainers were recorded in the past 3 months, which is concerning for maintenance evidence, although the repository's very recent creation and four merged pull requests provide some compensating activity.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not establish that a small package is unhealthy.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful verification gap for a package handling authentication and device secrets.