vis/curl_client_l5

The README gives clear integration steps, and the source repository matches the package. Ongoing oversight is limited by the lack of security practices and the very small maintainer base.

Latest 1.0.3

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2017, with no releases in the last 12 months despite the package being over nine years old. This is strong evidence of abandonment risk.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with its last push in October 2017. The long inactivity materially lowers confidence in ongoing maintenance.

Maintainers

Only one registry maintainer is listed, leaving little visible publishing redundancy or continuity. The linked repository is user-owned rather than organization-backed, so there is no provided compensating ownership context.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community signal to offset the age and inactivity.

Repo tooling

Composer is used for the build, which is appropriate, but no security scanning tool is present. This modestly reduces evidence of ongoing dependency and release oversight.