edenohana/sms-free-php

This release appears usable and well-structured, with an MIT license, substantial documentation, a changelog, repository tests, active recent development, security policy, Dependabot, and no deprecation or archival status. The main concerns are that the project is only 19 days old, all 16 recent commits come from one contributor, and the repository has minimal adoption evidence, so its long-term maintenance and bus-factor resilience are not yet established. The release workflow also has top-level write permissions, which is a supply-chain hygiene concern, though the analyzed workflows show no dangerous checkout, injection, or pull-request-target patterns.

Latest v3.0.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a real publishing continuity concern for an individually owned project, though repository activity confirms that the maintainer is currently active.

Project backing

The source repository is owned by a user account rather than an organization, so there is no demonstrated organizational maintenance pool to offset the single-contributor risk.

Release history

The package is only 19 days old with four releases, and the median interval is about 2.6 hours. This demonstrates active initial iteration but provides little evidence of sustained maintenance or release stability.

Repo bus factor

One contributor made all 16 commits in the last three months, creating a concentrated bus factor and a meaningful continuity risk. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to compensate for that concentration.

Repo popularity

The repository has only 1 star, 1 fork, and 1 watcher. Low popularity is supporting caution about external validation, but it is not decisive for a small package.