vis/comments_l5

The package includes clear installation instructions and has no install-time scripts. However, the repository has been inactive since April 2017, and the license metadata conflicts with its bundled MIT license.

Latest 1.0.35

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

The artifact includes an MIT license file, so the release is licensed, but the manifest declares it as proprietary. That mismatch creates avoidable uncertainty about the terms consumers should rely on.

Maintainers

Only one registry maintainer account is listed, leaving little visible publishing redundancy. The linked repository is user-owned, so there is no organizational backing shown to offset that thin maintainer base.

Release history

The latest release was published in April 2017, and there have been no releases in the last 12 months despite the package being over 10 years old. This indicates substantial abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. No newer activity compensates for this maintenance gap.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tools are present. This is a modest transparency and maintenance weakness rather than evidence of a specific defect.