Package Health/andydefer/php-signature-parser

andydefer/php-signature-parser

This is a young but actively maintained package with 30 releases in 78 days, a recent repository update, substantial repository test coverage, a clear MIT declaration, and no deprecation or install-time lifecycle scripts. Adoption carries moderate caution because all 44 recent commits came from one contributor, the repository has no security scanning or security policy, the project has no observed community traction, and the package remains below a stable major version; these concerns are meaningful but do not indicate abandonment or make the release unfit to use.

Latest v0.12.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account, Andy Defer, has registry publish access. This is a thin publishing base, and unlike organization-backed projects there is no organizational ownership signal to compensate for it.

Project backing

The repository is owned by a personal user account rather than an organization, so there is no organizational backing signal to offset the single-maintainer concentration.

Release history

The package is only 78 days old but has 30 releases, including 28 in the last 12 months and a median release interval of about 1 day. This demonstrates active development, although the short history limits maturity evidence.

Repo bus factor

One contributor made all 44 commits in the last three months, giving the project a bus factor of one and creating a material continuity risk.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is ambiguous for a young, small project: it provides no evidence of community support but also no unresolved backlog.