vxps/csp

The Apache-2.0 license and minimal runtime dependency make integration straightforward. The repository is not archived, but the project offers little evidence of ongoing maintenance and has no security policy.

Latest 1.0.1

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The package has no README, tests, or changelog, but this is a small PHP module whose published artifact contains implementation files and whose exact version has a GitHub release. The missing source-project scaffolding is therefore a minor transparency gap rather than a severe concern.

Release history

The package has only one release, with no releases in the last 12 months; its latest release was 454 days ago. This is meaningful abandonment risk for a dependency, despite the stable version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, providing no recent evidence of maintenance. The repository still exists, but that does not offset the prolonged inactivity.

Security policy

The linked repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This lowers transparency but is not by itself evidence that the package is unsafe.