Package Health/bluepsyduck/jms-serializer-factory

bluepsyduck/jms-serializer-factory

The repository has had no commits or releases for about four years and nine months, and it has no security policy. The package is documented, licensed, stable, and has a matching repository with tests, so pin this version if its unchanged dependencies remain suitable.

Latest 1.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a user account rather than an organization, so the single registry maintainer does not benefit from visible organization backing. This provides limited continuity evidence but is not abandonment proof.

Release history

The package has only two releases, with no release in about four years and nine months and none in the last 12 months. This indicates limited ongoing maintenance, though a small stable library may not need frequent releases.

Repo commit activity

There were no commits and no active maintainers in the last three months. Given the repository's age, this is evidence of stopped rather than merely slow recent development.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull request activity. This is consistent with a quiet project but does not by itself demonstrate active maintenance.

Repo tooling

The repository uses Composer build tooling but has no detected security scanning tools. The missing scanning is a modest transparency and hygiene gap, not a severe risk on its own.