Package Health/beapi/composer-scaffold-plugin

beapi/composer-scaffold-plugin

The organization-backed repository is still active and the package includes a README, changelog, and no install-time scripts. Its single recent contributor and conflicting license records warrant checking ownership and licensing before adoption.

Latest 2.4.4

Packagist

65%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

The manifest declares MIT, but the artifact license file is detected as GPL-3.0 and the README also describes GPLv3-or-later licensing. The release is licensed, but the mismatch needs resolution before use.

Release history

The latest release was over two years ago, with no releases in the last 12 months, which lowers confidence in release maintenance. The long history of 13 releases provides some maturity evidence.

Repo commit activity

The repository recorded one commit in the last three months, showing some current activity, although the pace is too thin to offset the absence of releases over the last 12 months.

Repo tooling

The project uses Composer for builds, which fits the package ecosystem. No security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled. This is a hygiene concern rather than evidence of abandonment.