Package Health

adachsoft/composer-tool

This release appears usable and actively maintained, with 19 releases over roughly 9 months, 18 releases in the last 12 months, a regular median release interval of about 8 days, clear MIT licensing, substantial documentation, a complete source tree with unit tests, and no install-time lifecycle scripts or registry deprecation. However, it remains a pre-1.0 package, has eight runtime dependencies, and no linked source repository was declared, limiting transparency and preventing verification of repository-level maintenance, provenance, and contributor activity. It is a reasonable dependency with moderate adoption risk, but should be pinned and reviewed as an evolving package rather than treated as mature infrastructure.

Latest v0.9.1PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

90

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Dependency profilecaution

The package declares eight runtime dependencies and six development dependencies, including several closely related libraries. This is a meaningful dependency surface to maintain and review, though it is not excessive for the documented Composer-tool functionality.

Maintainerscaution

The registry lists one account with publish access. This does not establish actual activity, but it indicates a thin administrative publication base and leaves limited redundancy if that maintainer becomes unavailable.

Version stabilitycaution

The latest version is v0.9.1 and is not marked as a prerelease, but the package has not reached a stable 1.x major version. The frequent release history provides some compensation, so this is a maturity caution rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arkadiusz Adach

Direct Dependencies

DependencyLast ReleaseScore
adachsoft/gitlib
Version ^4.0
adachsoft/collection
Version ^3.0
adachsoft/ai-tool-call
Version ^2.0
adachsoft/composer-lib
Version ^0.7
adachsoft/composer-json-fixer
Version ^0.2 || ^0.3 || ^0.4 || ^0.5

Weekly Downloads

Info

Last Published
12 days ago
Created
9 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform