dealnews/metadata

This is a young, pre-1.0 PHP library with good basic packaging and transparency: it has a clear README, an explicit BSD-3-Clause license, source tests, a small understandable file tree, no install-time lifecycle scripts, a matching organization-owned repository, and no deprecation or archive status. The main concerns are limited maturity—only two releases across 197 days—and no recorded commits or active maintainers in the last three months, alongside absent security scanning and security policy and unspecified GitHub Actions token permissions. It is reasonable to adopt with normal dependency pinning and review, but it does not yet have the maintenance track record of a mature dependency.

Latest 0.1.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 197 days old with two releases and a median release interval of about 197 days, so its maintenance and release track record are limited.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance; the recent release push and young project age provide limited context but do not remove the concern.

Repo popularity

The repository has only one star and no forks or watchers, providing little external adoption evidence; popularity is supporting evidence rather than a decisive health measure.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap for the repository.

Security policy

No repository security policy was found, reducing disclosure and security-process transparency.