xrow/xrownoderelation-ls

The package has a stable version, one runtime dependency, and no install-time scripts. Those positives do not offset the lack of recent activity, limited security documentation, and uncertainty about the repository's package identity.

Latest 1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in January 2016, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency intended to remain maintainable.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository's last push occurring in January 2016. This materially raises abandonment risk.

Repo package mention

The repository name does not match the full package name, and no README package mention was collected. The linked repository may therefore not clearly establish package ownership.

Repo popularity

The repository has one star and three forks, providing little supporting evidence of broad community adoption. Low popularity is not decisive, but it offers no meaningful compensation for the age and inactivity.

Repo tooling

Composer is used for builds, but no security scanning tool is present. This is a modest transparency and maintenance concern, not a severe risk by itself.