danack/console

Healthy and reasonable to depend on, with a clear license, documentation, tests, and recent releases. Maintenance is concentrated in one contributor and the repository has limited activity and no security policy, so review upgrade and support risk before relying on it broadly.

Latest v2.7.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account rather than an organization, so the single-contributor maintenance concentration is not backed by an organizational handoff path.

Repo bus factor

All three recent commits came from one contributor, so maintenance knowledge and release capacity are concentrated in a single person. The independently observed recent releases partly offset this but do not remove the continuity risk.

Repo commit activity

There were three commits in the last three months, showing recent maintenance, although the activity is modest for a dependency.

Repo popularity

The repository has only 8 stars, 1 fork, and 2 watchers, indicating a small user and contributor community. This is supporting caution rather than a severe concern because the project is actively releasing and well-scaffolded.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The lack of scanning lowers transparency around automated security checks, though it is not by itself evidence of an unsafe release.