xiio/array-manipulator

The package has a very small footprint and no security policy or scanning, which limits transparency. Its source is identifiable and not archived, but the release remains an alpha with no follow-up releases or recent development.

Latest v1.0.0-alpha

Packagist

35%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares two runtime dependencies, including phpspec/phpspec, with no development dependencies. This is a small dependency set, but the apparent test framework as a runtime dependency is unusual and adds avoidable dependency surface.

License

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This is a significant adoption and transparency concern for an open-source dependency.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer is not explained by organizational backing. This leaves limited visible maintenance capacity.

Release history

Only one release exists, published about 10 years ago, with no releases in the last 12 months. This strongly indicates abandonment risk for a dependency.

Repo commit activity

There have been no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years. This is the strongest maintenance concern.