componenta/di

The package is well documented and tested, with read-only workflows, pinned actions, and security scanning. Organization ownership and brisk release activity help, but maintenance remains concentrated in one contributor.

Latest v5.0.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 90 days old but has 20 releases, including releases within the last 12 months and a median interval of about 2 hours 41 minutes. This shows strong activity, though the short history leaves long-term maintenance unproven.

Repo bus factor

One contributor made 100% of the 971 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a material continuity risk.

Repo commit activity

The repository recorded 971 commits in the last three months, showing exceptionally strong recent activity. However, that activity is concentrated in one active maintainer, so it does not fully demonstrate resilient maintenance capacity.

Repo popularity

The repository has zero stars, forks, and watchers. This offers no external adoption evidence, but popularity is supporting evidence only and does not outweigh the strong recent activity.

Security policy

No repository security policy was found. This is a modest transparency gap, though the configured Composer security scanning partially offsets it.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Componenta

Direct Dependencies

Dependency	Last Release	Score
psr/container Version ^2.0	—	—
psr/http-message Version ^2.0	—	—
componenta/caster Version ^1.0	—	—
componenta/config Version ^3.0.0	—	—
componenta/reflection Version ^2.0.1	—	—