zeroseven/font-loader

Usable with caveats: the package is clearly identified, licensed, documented, and backed by an organization, but it has had only one release and no new release since October 2022. Its very small repository footprint and limited security hygiene make long-term maintenance uncertain.

Latest v1.0.0

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about 3 years and 11 months ago, with no releases in the last 12 months. That long period without a new release is a meaningful maintenance concern.

Repo issue activity

There is one open issue and no issue or pull-request activity in the last month. Combined with the old last push, this provides little evidence of active upkeep.

Repo popularity

The repository has only 2 stars and no forks, indicating limited visible adoption. This is supporting caution rather than a decisive concern because a small organization-backed extension can still be viable.

Repo tooling

Composer is used for builds, but no security scanning tools are reported. This is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities would be reported and handled.