Package Health/underpin/post-template-loader

underpin/post-template-loader

It has a clear README, a stable release, and a repository that matches the package and its organization owner. Composer-only tooling and no install scripts reduce adoption friction, but ongoing maintenance capacity is limited.

Latest 1.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published in November 2021 and none in the last 12 months. This is strong evidence of an inactive package, although the stable 1.1.0 release may still meet its narrow purpose.

Maintainers

One registry account can publish releases, which is a thin publishing base. The organization-owned repository provides some backing, so this is not treated as a severe standalone risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No provided signal shows recent maintenance to offset this.

Repo tooling

Composer is used as the build tool, but no security scanning tooling is present. The missing scanner is a modest hygiene gap rather than evidence that the package is unfit to use.

Security policy

The repository has no security policy. For a small package this is a transparency gap, though it does not outweigh the matching repository, license, and documented release.