yumaeda/shipping-fee

Its MIT license, focused dependency set, tests, changelog, and release notes make the small package easy to inspect. The limited repository activity and lack of security policy leave support and oversight uncertain.

Latest v1.0.2

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are both owned by the same individual account, which is consistent with a small personal project but does not provide organizational backing.

Release history

The package has had three releases, with the latest in May 2018 and none in the last 12 months. This long period without releases is meaningful evidence of limited ongoing maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates little evidence of active support.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small package, but this provides no additional evidence of community support.

Repo tooling

Composer is used for builds, but no security-scanning tools are present. This is a modest transparency and oversight gap, not evidence that the package is unsafe.