wengoooo/ymz

The package contains one source file and has no tests or security policy. It is licensed and not deprecated, but there is no recent activity to demonstrate ongoing support.

Latest v0.2

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in November 2019, with no release in about 6 years 10 months. This is strong evidence of abandonment risk for a package still being considered for adoption.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Package scaffolding

The artifact has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and project documentation reduce transparency and confidence in future changes, though the package is very small.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. This modestly weakens supply-chain hygiene, while the package's small scope limits the weight of the gap.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a secondary transparency gap rather than evidence of a security incident.