xaraya/karma

The organization-owned source matches the package and includes a README; the declared GPL license and non-deprecated status add useful transparency. Composer build metadata is present, but no security policy and no automated workflows leave limited evidence of ongoing project hygiene.

Latest 1.0.0

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 4 years and 5 months ago, with no releases in the last 12 months. That is substantial evidence of abandonment risk for a dependency, despite the stable version.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months. Combined with the last repository push about 3 years and 9 months ago, this is strong evidence that maintenance has stopped.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean tracker is not evidence of active maintenance and offers little compensation for the stale release history.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little additional evidence of maturity or community support.

Repo tooling

Composer is used as the build tool, providing normal dependency and packaging structure. No security scanning tools are configured, which is a modest project-hygiene gap but not decisive on its own.