Package Health/vpapaloukas/dice-passphrase

vpapaloukas/dice-passphrase

Usable with caveats: the release is well-documented, tested, licensed, and backed by a matching non-archived repository. However, it has only one release and no commits or active maintainers in the last three months, so ongoing maintenance is not yet demonstrated.

Latest 1.0.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 11 months ago, so there is not enough history to demonstrate sustained maintenance or a regular release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. With only one release, this lack of recent activity is a meaningful maintenance concern.

Repo popularity

The repository has one star, no forks, and no watchers. This is weak supporting evidence for maturity, but popularity alone does not make a small package unsafe to use.

Repo tooling

Composer is used as the build tool, but no security scanning tool is present. The absence of scanning is a transparency gap, though the package's small dependency surface partly limits its significance.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene concern rather than evidence that the package is unfit to use.