Package Health/blackbird/hyva-cms-library

blackbird/hyva-cms-library

This is a promising, actively maintained release from an organization-backed repository: it is not deprecated or archived, has recent commits and releases, includes a clear README and license, and the repository matches and explicitly mentions the package. The main reservations are its very short 29-day history, absence of packaged or repository tests and a changelog, lack of security scanning and a security policy, and low repository adoption metrics. These are meaningful transparency and maturity gaps, but current maintenance activity and organizational backing make the package reasonably suitable for adoption with normal dependency and release monitoring.

Latest 1.2.0

Packagist

82%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README documents the components, installation requirements, and usage, but neither the artifact nor repository contains tests or a changelog. For a new package this lowers maturity and verification confidence.

Release history

The package is only 29 days old with three releases and a median interval of about 15 days, so it shows active early development but has limited long-term stability evidence.

Repo popularity

The repository has only 1 star and 1 fork, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, so this is a modest concern rather than a severe health risk.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate, while the missing scanning reduces supply-chain assurance.

Security policy

The repository has no security policy, leaving vulnerability-reporting and coordinated-disclosure expectations undocumented.