voryx/thruway-common

Usable with caveats, but maintenance appears stalled: the last release was over four years ago and there has been no recent repository activity. The linked project is not clearly identified as this package, so verify its provenance before adopting it.

Latest 1.0.6

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases since 2016, but none in the last four years and the latest release was in February 2022. This is a meaningful maintenance concern for a dependency, despite its established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since 2022. This materially increases the risk that compatibility or maintenance issues will remain unresolved.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although the owner namespace matches, the missing direct reference makes the package-to-source relationship harder to verify.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The simple dependency profile reduces the significance of this tooling gap, though it provides little evidence of ongoing security maintenance.

Repository archived

The linked repository is not archived, which is better than an explicit abandonment marker. However, its last push was in July 2022, so the non-archived status does not compensate for the long inactivity period.