Package Health/twohundredcouches/gpx-merger

twohundredcouches/gpx-merger

The small dependency surface, MIT license, tests, and clear usage documentation reduce adoption friction. Maintenance has effectively stopped, and the repository lacks a security policy or scanning tooling, so future fixes and oversight are uncertain.

Latest 1.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository last being pushed in September 2021. The sustained inactivity raises abandonment risk.

Release history

The package has had no release in nearly five years: its latest release was September 2, 2021, with no releases in the last 12 months. This is a substantial maintenance concern despite the short early release interval.

Repo tooling

Composer is used for build and dependency tooling, but no security scanning tool was detected. This is a moderate oversight gap, especially alongside the lack of recent maintenance.

Security policy

The repository has no security policy, leaving no documented reporting or response process for vulnerabilities. For a small library this is a meaningful transparency gap, though not evidence of a defect itself.