2026-09-27 16:30 UTC
@danielpetrica@infosec.exchange what if a package hasn’t been updated in a while but still does what it says? Packages can be “done” but still valuable?
Replies (1)
-
@danielpetrica@infosec.exchange 2026-09-27 16:34
@emd@cosocial.ca this is why the algorithm does not penalise it immediately but is a progressive process. The health signal wants to be a signal of future maintenance too. If it has not been updated in 6 months for example the algorithm see it negatively. But is not the only signal. If it's supporting latest php and laravel it can still score healthy