e-spin/form-regex-bundle

This is a usable, established package with a clear LGPL-3.0-or-later license, a matching and maintained source repository, stable versioning, no registry deprecation, and a recent release after more than five years of availability. However, maintenance activity is currently thin: the repository has had zero commits and zero active maintainers in the last 3 months, the project has very little community adoption (3 stars and no forks), and it lacks tests, security scanning, and a security policy. The small file tree and limited dependency surface make some omissions understandable, but developers should verify compatibility and maintenance responsiveness before adopting it for a critical dependency.

Latest 2.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Two registry publishers provide some continuity, though registry access does not establish active development or maintenance capacity.

Package scaffolding

A 1,657-character README documents the extension and examples, but neither the artifact nor repository contains tests or a changelog. For a small 16-file bundle this is a genuine transparency and maintenance gap, though the README provides useful usage documentation.

Project backing

The repository is owned by the user account e-spin rather than an organization. This is consistent with a small independently maintained package, but provides less organizational continuity than an organization-backed project.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a recent release and push show the project is not archived, the current lack of observed development lowers confidence in responsiveness.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean queue is positive, but the lack of activity offers little evidence of active community or maintainer engagement.