tleckie/url-signer

Clear licensing, tests, documentation, and a small dependency set make the package easy to inspect and integrate. Its maintenance record is the main concern, with no commits or releases for about five years and no security scanning.

Latest 1.0.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in April 2021, with no releases in the last 12 months. This is strong evidence of an inactive project, although the package may be intentionally stable.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly five-year gap since the latest release. No provided signal shows ongoing maintenance capacity.

Project backing

The repository is owned by an individual rather than an organization. This is not inherently unhealthy, but it offers less visible institutional backing for a project already showing prolonged inactivity.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these values provide no external maintenance or community signal.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk by itself.