andydefer/php-client

This release appears actively maintained and transparently backed by a matching repository: it has 25 releases in 80 days, 25 commits in the last 3 months, a non-archived repository, an MIT license, repository tests, and no install-time lifecycle scripts. However, it remains an early 0.x package with a very concentrated maintenance profile: one registry maintainer and one repository contributor account for all recent activity. The repository also lacks security scanning and a security policy, and the package has no changelog or packaged tests, although repository tests partly compensate for the latter. It is usable, but dependency adopters should expect ongoing API evolution and single-maintainer continuity risk.

Latest v0.6.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Maintainers

Only one registry account, Andy Kani, has publish access. This is a continuity risk for a user-owned project because release authority is concentrated in one person.

Package scaffolding

The artifact includes a substantial README but no packaged tests or changelog; repository tests compensate for the missing packaged tests, while the absent changelog remains a minor transparency gap.

Project backing

The repository is owned by a user account rather than an organization, so there is no organizational maintenance backing to offset the concentrated contributor and maintainer profile.

Release history

The package is only 80 days old but has 25 releases, including 23 in the last 12 months, indicating active iteration rather than abandonment; the short history limits maturity evidence.

Repo bus factor

One contributor made all 25 commits in the last 3 months, giving the project a single-person bus factor and creating meaningful continuity risk.