bayfrontmedia/bones-api

Usable with caveats: the release is licensed, documented, backed by a matching organization repository, and not deprecated or archived. However, it has had no registry releases in about 18 months and no commits in the last 3 months, so maintenance appears uncertain.

Latest v1.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

100

Health Score Breakdown

Dependency profile

The package has 12 runtime dependencies and no development dependencies, creating a relatively broad runtime dependency surface and little visible separation of development tooling.

Release history

Only two releases exist, and there have been no releases in the last 12 months; the latest release is about 18 months old, which raises maintenance concerns for a framework starter kit.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has stalled.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone is not required for a small package to be healthy.

Repo tooling

Composer is used for builds, but no security scanning tooling is configured. The missing scanning is a transparency and process gap, though not severe on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

John Robinson

Direct Dependencies

Dependency	Last Release	Score
bayfrontmedia/bones Version ^5.3	—	—
bayfrontmedia/monolog-pdo Version ^1.1.	—	—
bayfrontmedia/leaky-bucket Version ^2.2	—	—
bayfrontmedia/multi-logger Version ^1.2	—	—
bayfrontmedia/php-validator Version ^4.0	—	—