citadel/aureum

This is an actively maintained, non-deprecated stable release with a substantial recent release history, current repository activity, tests, build tooling, and a repository that clearly matches the package. The main concerns are that all 83 commits in the last three months came from one maintainer, the project has no security policy or security-scanning tooling, and releases occur at an unusually high frequency with a median interval of about 1 hour, which may indicate rapid iteration and warrants version pinning and review. The zero-star repository provides little independent adoption evidence, but is not decisive for a small package.

Latest 1.12.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by the user account mous13 rather than an organization, so the single-maintainer concentration is not visibly offset by organizational backing.

Repo bus factor

One contributor made all 83 commits in the last three months, creating a concentrated bus factor and making continuity dependent on a single individual.

Repo popularity

The repository has zero stars, forks, and watchers, so there is little evidence of external adoption or review; this is supporting caution rather than a standalone abandonment verdict.

Repo tooling

The repository uses Make and Composer build tooling, but has no security-scanning tools; the build support is positive while the missing security automation is a genuine hygiene gap.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and maintainer response guidance undocumented.