daika7ana/smallest-box

Clear documentation, tests, and release notes make the package straightforward to evaluate. The project is young, with only two releases, two recent commits, and all recent work from one contributor. Workflow actions are also unpinned, creating a modest reproducibility concern.

Latest 1.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Release history

The package is young at 110 days and has only two releases, with a median interval of about 41 days. This is limited evidence of long-term maintenance, though the recent release activity is a positive counterweight.

Repo bus factor

One contributor made all two commits in the last three months, leaving maintenance highly concentrated in a single person.

Repo commit activity

Only two commits were recorded in the last three months. Recent activity exists, but the small volume provides limited evidence of sustained maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. For a small package this is a hygiene gap rather than evidence of abandonment.