zegnat/mintoken

Usable with caveats, but this token endpoint has seen no release since 2018 and no repository commits in over five years. It has clear licensing, documentation, release notes, and no runtime dependencies, but its security-sensitive purpose makes the long inactivity a significant maintenance concern.

Latest 2.0.0

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in May 2018, with no releases in the last 12 months despite the package being over eight years old. That is a substantial abandonment concern for a security-sensitive token endpoint.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with several years of inactivity and increasing abandonment risk.

Project backing

The package is backed by a matching individual-owned repository rather than an organization, so the single-person project context provides limited maintenance redundancy.

Repo issue activity

There are seven open issues and two open pull requests, with no issues or pull requests created or closed in the last month. This suggests unresolved maintenance demand without recent response.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling is present. For a token endpoint, that missing automated security coverage is a meaningful hygiene gap.