crell/carica

The repository has recent commits, tests, a clear license, and a security policy. Low popularity, no automated security scanning, and unpinned workflow actions leave meaningful maintenance and build-integrity gaps.

Latest 0.4.4

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 422 days old with 11 releases, and its latest release was recent, but only one release occurred in the last 12 months; the release cadence is uneven rather than consistently active.

Repo bus factor

All four recent commits came from one contributor, leaving maintenance dependent on a single person. The repository is user-owned rather than organization-backed, so there is no provided project-backing evidence to offset that concentration.

Repo popularity

Seven stars and one fork indicate a small user and contributor community. Popularity is supporting evidence rather than a verdict, but it provides little additional maintenance assurance here.

Repo tooling

Composer and Task tooling are used, but no repository security-scanning tool was detected. This is a hygiene and assurance gap, not evidence that the release is unsafe.

Version stability

Version 0.4.4 is not a stable-major release, so the public API may still change materially even though it is not marked as a prerelease.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Larry Garfield

Direct Dependencies

Dependency	Last Release	Score
crell/fp Version ^1.0	—	—
psr/http-factory Version ^1.1	—	—
psr/http-message Version ^1.0\|^2.0	—	—
crell/attributeutils Version ^1.3	—	—
psr/http-server-handler Version ^1.0	—	—