aternos/serializer

The package is well documented and tested, with a clear MIT license and a recent stable release. Organization backing offsets the concentrated commit activity, while unpinned workflow actions and the lack of a security policy leave modest maintenance concerns.

Latest 1.5.0

Packagist

80%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for nearly two years with seven releases and a latest release in June 2026, though only one release occurred in the last 12 months, indicating slower recent cadence.

Repo bus factor

All 18 recent commits came from one contributor, creating a real continuity risk; organization ownership provides some handoff capacity but does not remove the concentration.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in project hygiene.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow audit

The single workflow was fully analyzed with no high-confidence audit findings or dangerous untrusted triggers. However, all three referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.