amateescu/prov

This is a reasonably healthy and usable release with strong repository and package transparency: it is MIT-licensed, non-deprecated, stable, actively released, recently pushed, tested, and backed by a substantial 148-file source tree. The main risks are that the project is young, all 28 recent commits come from one contributor, the repository has little recorded adoption, and it lacks a security policy; one workflow also omits top-level token permissions. These concerns warrant monitoring and contingency planning, but there is no evidence of abandonment or severe release hygiene failure.

Latest 1.5.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a modest continuity concern, although repository activity shows that the same maintainer is actively developing the project.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing to offset the concentrated maintainer base.

Repo bus factor

One contributor produced 100% of the 28 commits in the last three months, creating a meaningful continuity and bus-factor risk for a user-owned project.

Repo issue activity

There are no open issues or pull requests, and no recent issue or pull-request activity. This is neutral for a small project but provides little evidence of community support or responsiveness.

Repo popularity

The repository has only 1 star and no forks, so external adoption and community validation are limited; popularity is supporting evidence rather than a verdict.