cockroach/swoole-boot

Its small footprint and absent security policy add little confidence. The MIT license and matching source repository improve transparency, but the project offers limited evidence of ongoing support.

Latest 1.0.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only two releases, both in October 2019, with no releases in roughly six years. That is strong evidence of stalled maintenance for a runtime framework.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having been inactive since 2019. This materially raises abandonment risk.

Dependency profile

Four runtime requirements, including Swoole and mbstring extensions, form a meaningful but not unusually broad dependency surface. No development dependencies are declared, so build coverage is limited but not decisive.

Repo popularity

Five stars, no forks, and one watcher indicate a very small user and contributor footprint. Popularity is only supporting evidence, but this provides little maintenance buffer.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning is a hygiene gap rather than proof of unsafe code.