boson-php/cpu-info

Dependency profilecaution

The package has four runtime dependencies, including platform-related packages, so updates and compatibility are not entirely self-contained. The dependency count is still moderate rather than excessive.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is the clearest maintenance concern, although the January 2026 push and release history provide some counterweight.

Repo popularitycaution

The repository has one star, no forks, and no watchers, indicating a very small user and contributor footprint. Popularity is supporting evidence only, so this lowers confidence in external scrutiny rather than making the package unfit.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, partly offset by the repository's basic automated build setup.

Security policycaution

No repository security policy was found. This limits transparency about vulnerability reporting and response, though it is not by itself evidence that the package is unsafe.