Package Health/webignition/ulid-validator

webignition/ulid-validator

Risky to adopt without confirming that its behavior still meets your needs: it has had no release or commit activity since April 2021. The package is small and transparent, with tests, an MIT license, and a matching repository, but its long inactivity creates meaningful abandonment risk.

Latest 0.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 5 years ago, with no releases in the last 12 months. That is strong evidence of an inactive project, although a small stable validator may not require frequent releases.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the last push occurring about 5 years ago. No provided maintenance signal compensates for this prolonged inactivity.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap, not a standalone reason to reject the package.

Repository archived

The repository is not marked archived, but its last push was about 5 years ago and commit activity is absent, so the non-archived status does not offset the maintenance concern.

Security policy

The repository has no security policy. For a small validator this is a limited process gap, but it reduces transparency about vulnerability reporting.