vchukh/ualibs

The package is small and straightforward, with a narrow PHP-only dependency profile and clear licensing. Its last release and repository push were about 8 years ago, with no recent commits and only 1 star, so maintenance capacity is uncertain. There is also no security policy or scanning tooling.

Latest 0.1.6

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about 8 years and recorded 0 releases in the last 12 months. This is strong evidence of abandonment risk, despite the package having five historical releases.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. No provided signal shows current maintenance activity to offset this.

Repo popularity

The repository has 1 star, 0 forks, and 2 watchers, indicating very limited adoption or community support. Popularity is supporting evidence rather than decisive on its own, but it reinforces the maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe by itself.

Security policy

The repository has no security policy. For a small library this is a transparency gap, though the narrow dependency profile and absence of install-time scripts reduce the practical concern.