boson-php/uri-factory

Usable with caveats: the package is licensed, correctly backed by its organization repository, has repository tests, and a steady release history. However, there have been no commits or active maintainers in the last three months, and the repository lacks security scanning and a security policy.

Latest 0.19.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern even though it was pushed within the last year and has a prior release history.

Repo issue activity

There were no new issues or pull requests in the last month, and no pull requests were merged; this provides little evidence of active community maintenance.

Repo popularity

The repository has no stars, forks, or watchers. This is weak supporting evidence rather than a decisive problem for a small library, especially given its organization backing.

Repo tooling

The repository uses Composer, but no security-scanning tool was detected. Build tooling is present, while the missing security automation modestly reduces transparency.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a hygiene gap rather than evidence that the package is unsafe.