zpmlabs/undraw-php

The focused package has clear usage documentation, an MIT declaration, and a matching organization-owned repository. Its maintenance record is thin: all four releases arrived within minutes, and there have been no commits in the last three months. The missing security policy and automated scanning add modest transparency concerns.

Latest v1.0.3

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

All four releases were published within a single day, with a median interval of only a few minutes; this shows an initial release burst rather than sustained maintenance over the package's 324-day lifetime.

Repo commit activity

There were no commits and no active maintainers in the last three months, indicating a thin maintenance record for a package that was released about 324 days ago.

Repo popularity

The repository has only 1 star and no forks or watchers, offering little evidence of broad external review or community support; this is supporting caution rather than a verdict by itself.

Repo tooling

The repository uses Composer but has no detected security-scanning tooling, leaving a modest quality and transparency gap for a network-facing client.

Security policy

No security policy was found in the repository, reducing clarity about how vulnerabilities would be reported and handled.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—
psr/http-message Version ^1.0 \|\| ^2.0	—	—
psr/simple-cache Version ^3.0	—	—
php-http/discovery Version ^1.19	—	—