yggverse/gemtext

The library has a clear README, tests, release notes, and a small focused artifact. MIT licensing, Composer packaging, and an unarchived organizational repository improve transparency, though future fixes may depend on a narrow team.

Latest 1.0.2

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all within about 10 days in June and July 2024, with no release in over two years. That makes ongoing maintenance uncertain despite the initially active cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since July 2024. This raises the risk that compatibility or security fixes may not arrive promptly.

Repo popularity

The repository has 0 stars and 0 forks, with 2 watchers. Popularity is only supporting evidence, but these numbers provide little evidence of a broad user or contributor base.

Repo tooling

Composer build tooling is present, which fits this PHP package, but no security-scanning tooling was detected. The missing scanning is a modest supply-chain hygiene gap.

Security policy

The repository has no security policy. For a small library this is a transparency and reporting gap, though it does not by itself show that the package is unsafe.