wikimedia/update-history

Risky to adopt despite a real repository, clear licensing, and a usable package. The release history is sparse and recent repository activity is absent, while the name signal indicates it may be borrowing the identity of the much more established wikimedia/utfnormal package.

Latest 1.0.3

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package resembles wikimedia/utfnormal and is marked as borrowing its lookalike identity, despite 0.0 artifact overlap and no README identification as a lookalike. This is a serious risk that consumers may have intended the much more established wikimedia/utfnormal package.

Release history

Only 3 releases have been published over about 5 years, with a median interval of about 791 days, although one release occurred in the last 12 months. This indicates a mature but very sparse release cadence.

Repo commit activity

The repository had 0 commits and 0 active maintainers in the last 3 months. The recent push provides some counterevidence, but the observed development activity is currently absent.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. This is a transparency and maintenance gap, though the repository has no workflows that would otherwise amplify it.

Security policy

The repository has no security policy. For a small command-line release helper this is a transparency gap, but it does not by itself show abandonment or unsafe behavior.