ajaxjs/query-sign-php

This is a cleanly packaged, licensed, zero-runtime-dependency PHP library with a matching repository, substantial documentation, repository tests, no install-time scripts, and no deprecation status. However, v1.0.0 was released only hours ago, there is no release track record, the repository has no recorded commit activity over the measured three-month window, has no security policy or security scanning, and has no adoption indicators; these are meaningful maturity and maintenance uncertainties rather than evidence of maliciousness. It may be reasonable for controlled use, but dependency adopters should watch for follow-up releases and maintenance activity before treating it as a mature long-term dependency.

Latest v1.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

There is one registry publishing account. That is a limited administrative base, and the repository is also owned by the same user account, so it provides some ownership continuity but little demonstrated redundancy.

Project backing

The repository is owned by an individual user account rather than an organization, so there is no organizational backing or succession evidence to offset the thin maintainer base.

Release history

The package is only 0 days old and has a single release, so there is no demonstrated release consistency or long-term maintenance history.

Repo commit activity

No commits and no active maintainers were recorded during the measured three-month period. Because the repository is newly released, this may largely reflect limited observation history, but it still leaves maintenance capacity unproven.

Repo popularity

The repository has zero stars, forks, and watchers. For a package released only hours ago this is unsurprising, but it provides no external adoption or community-health evidence yet.