efabrica/composer-plugin

The package has a clear README, MIT licensing, release notes, a small dependency footprint, and no install-time scripts. Its organization-backed repository is still active, but the registry has had no release for about three years and seven months, with only one recent commit from one contributor.

Latest 1.0.2

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases exist, and none was published in the last 12 months; the latest registry release was about three years and seven months ago. This is a meaningful maintenance concern, though recent repository activity provides some compensation.

Repo bus factor

All recent commits came from one contributor, creating concentration risk. The organization-owned repository partly offsets this because maintenance can be handed off within the organization.

Repo commit activity

There was one commit in the last three months, showing limited current maintenance but not a strong release or development cadence.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. The missing scanning tooling is a modest transparency gap rather than a severe adoption blocker.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers and maintainers.