box/shmock

The package has had no release or commit activity since February 2017, and its only stable release is now old. It does include tests, documentation, an Apache-2.0 license, and organization backing, but the prerelease status and lookalike identity remain significant concerns.

Latest v2.0.1-beta2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of the much more established box/spout package: it has 21 versus 426,281 monthly downloads and explicitly borrows the lookalike identity. Consumers most likely wanted box/spout, making this a severe adoption risk.

Release history

Although the project has 10 releases since 2014, its latest release was in February 2017 and it has had no releases in the last 12 months. That long gap materially raises abandonment and compatibility risk.

Repo commit activity

There have been zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating the project is effectively dormant.

Dependency profile

Four runtime dependencies are declared, including PHP, PHPUnit, nicmart/string-template, and sebastian/diff. This is a moderate dependency surface rather than an unusually broad one, though the old project age may make compatibility harder.

Repo issue activity

There are two open issues and one open pull request, with no new or closed issues or pull requests in the last month. This suggests little current project attention.