Package Health/travail/image-perceptualhash

travail/image-perceptualhash

Risky to adopt for a new project: it has had only one release, with no registry releases for over 10 years and no repository commits for over 8 years. The package is small but understandable, with tests, a README, and no deprecation or install-time scripts.

Latest v0.1.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published over 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the repository remaining available.

Repo commit activity

The repository has recorded no commits and no active maintainers in the last 3 months, consistent with the last push being over 8 years ago. The lack of recent maintenance is a significant concern for a dependency.

Project backing

The registry namespace and repository owner match, providing consistent ownership evidence. The owner is an individual account, so there is no organization-backed maintainer capacity to offset the long inactivity.

Repo tooling

Composer is used as a build tool, but no security scanning tooling is present. The missing scanning is a transparency gap, though the repository's small and inspectable file tree limits its weight.

Repository archived

The linked repository is not archived, although its last push was over 8 years ago. The active archive status is a positive signal but does not compensate for the observed inactivity.