xdli/q_and_a

The package is small, clearly licensed, and its README explains installation and API use. It has no security policy or automated security tooling, leaving maintenance and disclosure practices unclear.

Latest 1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, with the latest published over seven years ago and none in the last 12 months. This is strong evidence that the release is no longer actively maintained.

Repo issue activity

There have been no new or closed issues or pull requests in the last month, alongside two open issues and no pull requests. This supports the conclusion that project maintenance is inactive.

Repo tooling

Composer build tooling is present, but no security-scanning tooling is reported. That leaves security hygiene less verifiable, though it is less serious than the maintenance gap.

Repository archived

The repository is not archived, which avoids the strongest abandonment indicator, but its last push was in January 2019 and does not offset the long period without releases.

Security policy

The repository has no security policy, so users are given no documented process for reporting vulnerabilities or receiving security guidance. This is a secondary transparency gap for a package that exposes application APIs.