alchemy/zippy

Healthy and suitable to depend on, with some maintenance caveats. It has a long release history, a current stable release, active organizational backing, tests, and a recent GitHub release; however, recent work is concentrated in one contributor and the repository lacks a security policy.

Latest 2.0.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Six runtime dependencies are a moderate dependency surface for an archive-management library, including filesystem, process, and HTTP components; this is reasonable but adds maintenance exposure.

Repo bus factor

One contributor made all recent commits, creating a low short-term bus factor. Organizational ownership provides some handoff capacity, so this is a concern rather than a severe abandonment signal.

Repo commit activity

The repository recorded 11 commits in the last 3 months, showing recent work, but all activity came from one active maintainer.

Repo issue activity

There are 36 open issues and no issues or pull requests were closed or merged in the last month, indicating unresolved maintenance workload despite one open pull request.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a gap in automated security maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alchemy

Direct Dependencies

Dependency	Last Release	Score
symfony/process Version ^6.0 \|\| ^7.0	—	—
symfony/filesystem Version ^6.0 \|\| ^7.0	—	—
symfony/http-client Version ^6.0 \|\| ^7.0	—	—
doctrine/collections Version ~1.0	—	—
symfony/polyfill-mbstring Version ^1.3	—	—