duxweb/dux-lite-cloud

The MIT license, focused README, and matching organization-owned repository make its contents easy to inspect. A small dependency set and seven releases in about a month provide useful context, while the early-stage version limits confidence.

Latest v0.0.7

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers during the last three months. Because this package provides cloud package-management commands, the absence of recent source activity is a meaningful maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. That is a hygiene gap rather than proof of unsafe code, and the modest package scope partly limits its weight.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This lowers transparency but is not severe enough to make the release unfit on its own.

Version stability

Version v0.0.7 is not a stable major release, so the public API and behavior may still change. It is not marked as a prerelease, which partly offsets that concern.