uvodohq/composer

The MIT license and single runtime dependency make adoption straightforward. The small source tree, absent README, and lack of security tooling provide limited documentation and assurance. Pin this exact version rather than expecting ongoing updates.

Latest v1.0.0

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both around four years ago, and none in the last 12 months. This is strong evidence of abandonment risk, although the package is not deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.

Package file tree

The artifact and repository each contain only five files, including two source files, with no visible documentation or tests. The minimal footprint may fit a small plugin, but it offers little evidence of maturity.

Package scaffolding

The package has no README, tests, or changelog. Missing tests and changelog are normal in published artifacts, but the absent README is a documentation gap for a plugin consumers must configure.

Repo tooling

Composer is used as the build tool, which fits the ecosystem, but no security scanning tool is present. This is a modest assurance gap rather than a standalone severe risk.