yanivgal/megdb

The package has a valid MIT license, no install-time scripts, and a repository that clearly matches its name. Its seven-character README and absent security policy provide little guidance, while the very small project has not shown recent maintenance.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in March 2016, with no releases in the last 12 months. This long release gap is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in March 2016. The inactive source provides no evidence of ongoing maintenance.

Maintainers

Only one registry account has publish access, leaving a thin publishing base. This reinforces the abandonment concern, although registry access alone does not establish who actively maintains the project.

Package scaffolding

The artifact includes a README, but it is only seven characters long, and the repository has no tests or changelog. Missing tests and changelog are normal packaging practice, while the nearly empty README is a real transparency gap for a database library.

Security policy

The repository has no security policy. This is a modest transparency weakness, especially for a database abstraction library, but it is less serious than the prolonged inactivity.