customergauge/session

This is a usable, licensed, stable-major package with a small but complete-looking codebase, tests, no install-time lifecycle scripts, and organizational repository backing. Its main health concern is maintenance depth: the repository has only 9 stars, one registry maintainer, and no commits or active maintainers in the last 3 months, while release activity is sparse at one release in the last 12 months. The latest release and recent repository push are reassuring, but they do not fully offset the thin activity and contributor evidence; adopt it with some maintenance-risk caution.

Latest 2.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publish access, which is a resilience concern in isolation; however, the repository is owned by an organization, making a short registry maintainer list less concerning than it would be for an individual-owned project.

Release history

The package has existed for about 5 years and 10 months with 11 releases, but only one release in the last 12 months; this indicates continuity with relatively sparse recent release activity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, which is the clearest concern for maintenance continuity; the recent release or push does not establish sustained contributor activity.

Repo popularity

The repository has 9 stars and 2 forks, indicating limited adoption and community redundancy; popularity is supporting evidence rather than a decisive health criterion, so this is a modest concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a transparency and maintenance-hygiene gap, though it is not by itself evidence that the package is unsafe.