tualo/dav

The package has only a six-character README and no repository security policy or security-scanning tool. Its MIT licensing, small dependency set, and organization-backed repository provide useful transparency, but ongoing quality and security practices are limited.

Latest 1.0.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, but it is only six characters long and offers essentially no consumer guidance. The absence of tests and a changelog is expected packaging practice and is not itself a gap.

Release history

Only two releases have been published over about 15 months, with one release in the last 12 months; this provides limited evidence of sustained maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful abandonment concern for a package still being depended on.

Repo tooling

Composer is used for builds, but no repository security-scanning tool was detected, leaving security-quality checks less transparent.

Security policy

The linked repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.