vehsamrak/phplist

Its tests, README, MIT license, and simple dependency profile support routine use. The small project has limited community activity and no documented security process, so future fixes may depend on one maintainer.

Latest 1.1.2

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release for about eight years, with five releases concentrated in October 2018. This is a meaningful maintenance concern, though the repository remained active later and is not archived.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old registry release, this indicates a real risk of slow fixes or abandonment.

Repo issue activity

Two issues remain open, with no issues or pull requests opened or closed in the last month. This is a modest sign of limited ongoing project activity.

Repo popularity

The repository has only four stars, two forks, and one watcher, so there is little visible community support to compensate for the thin maintenance activity.

Repo tooling

Composer is used for builds, but no security scanning tool is present. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.