vallory/nosbox

The package has a matching MIT license, a clear repository match, and no install-time scripts. Its small footprint and lack of security tooling reduce transparency, while the project appears effectively inactive.

Latest 1.4

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, with none in the last 12 months; its latest release was published in November 2020, over 5 years ago. This strongly indicates abandonment for a dependency intended to remain usable.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since November 2020. The repository is not archived, but that does not compensate for the prolonged inactivity.

Repo popularity

The repository has 0 stars, 1 fork, and 1 watcher, providing little supporting evidence of a broader maintenance or review community. Low popularity is not decisive by itself, but it offers no counterweight to the inactivity signals.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling is present. This is a modest hygiene gap rather than evidence that the release is unsafe on its own.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less serious than the package's maintenance inactivity.