astral-php/astral-vite

Usable with caveats: it is a young package with only two releases and all recent repository work from one contributor. Clear licensing, documentation, a changelog, recent maintenance, and no install scripts or dangerous workflows make it reasonable to evaluate, but the project has limited operating history and no security policy or scanning tooling.

Latest 1.1.1

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health checks

Project backing

The registry namespace and repository owner match, but the owner is a user account rather than an organization, providing limited evidence of institutional maintenance capacity.

Release history

The package is only 166 days old with two releases, and the median interval is about 149 days, so its maintenance history is still limited and its long-term stability is unproven.

Repo bus factor

All recent commits came from one contributor, creating a meaningful single-maintainer dependency risk; the repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset it.

Repo commit activity

There was one commit in the last three months from one active maintainer, showing recent activity but only a thin maintenance record.

Repo tooling

Composer is used as a build tool, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.