variablesign/datatable

It has a clear MIT license, a matching source repository, and release notes for this version. The README is still largely a template, while the repository has no security policy or scanning, adding transparency concerns.

Latest v1.1.0-beta1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with none in the last 12 months; the latest release was in May 2024 despite this assessment occurring much later. This is strong evidence of abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the last push being in May 2024, this materially raises abandonment risk.

Package scaffolding

A changelog and release notes for this version provide useful project history. Tests are absent, but that is not expected in the published artifact; the README exists but contains substantial template text that weakens consumer documentation.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these figures provide no supporting evidence of an active user or contributor base.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.