Package Health/trueifnotfalse/lumen-prometheus-exporter

trueifnotfalse/lumen-prometheus-exporter

The package has clear documentation, tests, a changelog, and a license, but it has received no release or repository commits for over four years. Its workflows also leave all four action references unpinned and provide no security policy, so maintenance and build transparency are concerns.

Latest 3.1.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over four years ago, with no releases in the last 12 months. Its 13 releases over a long history show prior maintenance, but current abandonment risk is substantial.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in over four years. This is strong evidence of abandonment risk.

Project backing

The repository owner is an individual account rather than an organization, so the small registry maintainer list does not show substantial organizational backing.

Repo tooling

Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a transparency gap, though it is less serious than the absence of recent maintenance.

Repository archived

The linked repository is not archived, which is a positive counterpoint to the stale release and commit history. Its last push was still over four years ago.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arquivei

Direct Dependencies

Dependency	Last Release	Score
guzzlehttp/guzzle Version ^6.3 \|\| ^7.0	—	—
illuminate/support Version ^6.0 \|\| ^7.0 \|\| ^8.0 \|\| ^9.0	—	—
promphp/prometheus_client_php Version ^2.2.1	—	—