vidavh/lumen-gateway

The package has tests, a README, an MIT license, and no install-time scripts. Its tiny user base, absent security tooling, and lack of repository activity leave maintenance and abandonment risk high.

Latest v1.0.2

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only three releases, all concentrated in June 2021, with no releases in the last 12 months and a latest release roughly five years ago. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided maintenance signal compensates for this inactivity.

Project backing

The repository is owned by an individual account rather than an organization, and no organizational backing is shown. Combined with the single registry maintainer, this provides limited visible maintenance capacity.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, indicating very limited external adoption or review. Popularity is supporting evidence rather than decisive, but it adds to the maintenance risk here.

Repo tooling

The project uses Composer, but no security scanning tools were detected. This is a meaningful transparency and maintenance gap, though it is less severe than the prolonged inactivity.