zongphp/file

The package is small and transparent, with a matching source tree, a clear MIT declaration, and no install-time scripts. Its lack of tests, security scanning, and security policy adds little assurance, while the long maintenance gap makes future fixes uncertain.

Latest 2.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, and the latest was published in January 2018; there have been no releases in more than eight years. This is strong evidence of abandonment risk despite the stable 2.0 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and leaving little evidence of ongoing maintenance.

Repo tooling

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. That weakens automated detection without proving the package is unsafe.

Security policy

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. The package is small, but this remains an assurance gap.