valkovic/flash

Risky to adopt: this package has had only one release and no recorded maintenance for about 9 years. It has a usable README and a declared MIT license, but the long inactivity and minimal project activity make abandonment a serious concern.

Latest v0.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 9 years ago, with no releases in the last 12 months. That strongly suggests the dependency is abandoned or no longer maintained.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with the repository having stopped changing about 9 years ago. This is a serious maintenance and abandonment risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these figures provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. This is a transparency and maintenance gap, though it is secondary to the long inactivity.

Security policy

The repository has no security policy. For a small, old package this is a genuine transparency gap, but it is less significant than the lack of releases and commits.