vlucas/spot2

The project has a clear README, tests in its repository, a stable release, and an organization-backed source project. Its security documentation is limited, and the single registry publisher does not offset the lack of recent package releases or repository activity.

Latest v2.2.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 20 releases over more than 12 years, but it has had no release in the last 12 months; the latest registry release was in October 2018, which raises abandonment risk.

Repo commit activity

No commits and no active maintainers were recorded in the last three months, a strong sign that development has stalled despite the repository not being archived.

Dependency profile

The package has four runtime dependencies, including Doctrine DBAL, which is a moderate dependency surface for an ORM and warrants routine compatibility monitoring.

Repo issue activity

There are 58 open issues and 6 open pull requests, with no issues or pull requests opened or merged in the last month; this supports concern about responsiveness.

Repo tooling

Composer is used for builds, but no security scanning tooling is configured. The missing scanning is a transparency gap, though it is not severe on its own.