txiki/callback

The package has a clear MIT license, a usable README, repository tests, and a changelog. Its tiny user base and lack of security scanning add little assurance for a project that has seen no recent maintenance.

Latest 0.1.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, 0.1.0, published over 11 years ago, with no releases in the last 12 months. This is strong evidence that development has stopped, although a small stable library can sometimes remain useful.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the single old release, this materially increases abandonment risk.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little evidence of a broad community that could sustain the package.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap, while the build tooling provides some project structure.

Security policy

The repository has no security policy. For a small callback library this is a minor transparency gap, but it offers no documented route for reporting vulnerabilities.