andydefer/php-jsonl

This is a usable but very young package with strong current activity and reasonable repository transparency. It has 46 releases in 87 days, including 39 in the last 12 months, the repository is not archived and was pushed recently, and the source tree contains tests, documentation, build tooling, and security scanning. However, maintenance is concentrated entirely in one contributor, the project has no repository security policy, zero observed popularity or issue activity, and remains below a stable major version. The package is therefore suitable for considered use, but dependency owners should monitor releases and have a fallback plan because its long-term maintenance capacity is not yet established.

Latest v0.11.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Maintainers

Only one account has registry publish access. This is not itself evidence of poor maintenance, but it indicates limited publishing redundancy and is consistent with the repository's single-contributor profile.

Project backing

The repository is owned by an individual user rather than an organization, so there is no provided organizational backing to offset the concentrated maintainer base.

Release history

The package is only 87 days old but has 46 releases, with 39 in the last 12 months and a median release interval of about 17 hours. This demonstrates active publishing, though the short history and unusually rapid cadence leave long-term stability unproven.

Repo bus factor

All 40 recent commits came from a single contributor, giving the project a high bus-factor risk. No organization backing or second active contributor is provided to compensate for this concentration.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a small or new project rather than abandonment, but it provides little evidence of community support or defect-handling capacity.