Package Health/xanweb/c5-http2-server-push

xanweb/c5-http2-server-push

Risky to adopt: the package has had no release for over six years and no recent repository activity. It remains licensed, correctly backed by its repository, and has no install-time scripts, but its maintenance appears effectively dormant.

Latest v1.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in February 2020, with no releases in the last 12 months; the long gap since the latest release is a substantial abandonment concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's prolonged lack of releases.

Repo tooling

Composer is used as the build tool, but no security scanning tooling is configured; this is a modest transparency gap that does not outweigh the stronger maintenance concern.

Repository archived

The repository is not marked archived, which is a positive mitigating signal, but it was last pushed in March 2020 and has not shown recent maintenance.

Security policy

No repository security policy is present, limiting guidance for reporting vulnerabilities in a package that has otherwise shown little recent maintenance.