upbot/dependencies

Clear documentation, an MIT license, and no install-time scripts make the package easy to inspect. The repository has no tests or security policy, so confidence in long-term maintenance remains limited.

Latest v0.1.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's first release, published today, so there is no release history or established cadence to demonstrate maturity. Its newness partly explains the limited evidence rather than proving abandonment.

Repo commit activity

No commits or active maintainers were recorded in the last three months. Because the repository and package were created today, this is mainly an evidence gap, but it still leaves maintenance capacity unproven.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. The package's clear README and license improve transparency but do not replace a security process.

Version stability

Version v0.1.0 is an early, non-stable-major release, which signals that the API and behavior may still change. It is not marked as a prerelease, providing a small counterpoint.