chiron/reactphp

It has an MIT license, stable versioning, three runtime dependencies, and no install-time scripts. Repository activity and documentation do not provide enough confidence for a long-term dependency, despite the repository remaining available and having basic Composer tooling.

Latest 1.2.4

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in November 2021, with no releases in the last 12 months despite an established package age. This is strong evidence of abandonment risk, although the package has a coherent history of eight releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, reinforcing the long gap since the latest registry release. No provided activity signal compensates for this lack of recent maintenance.

Package scaffolding

The artifact includes a README, and the repository has tests plus a GitHub release for this version, which provide some project evidence. However, the published README is still filled with template text rather than explaining this package, weakening consumer transparency.

Repo package mention

The repository name matches the package, but its README does not mention the package name. That weakens confidence that the repository clearly documents the published package, even though the name match is a compensating signal.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup is a positive, while the missing scanning capability is a minor hygiene gap rather than a severe risk.