vcn/exeg

The MIT license, clear README, and small dependency footprint make the package straightforward to inspect and integrate. However, it has had no release or repository activity for nearly seven years, with no tests or security scanning evident.

Latest v1.3.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on October 25, 2019, and there have been no releases in the last 12 months. This long release gap is strong evidence of abandonment risk, despite the package having five historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year release gap. The repository is not archived, but there is no observed recent maintenance.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad maintenance community.

Repo tooling

Composer is used as a build tool, but no security-scanning tool is present. The build setup is appropriate for this PHP library, while the missing scanning capability is a modest transparency gap.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the much stronger evidence of inactivity.