Package Health/elliotjreed/openai-product-feed

elliotjreed/openai-product-feed

This is a well-scaffolded, licensed PHP library with tests, a substantial README, a coherent 67-file source and test tree, minimal runtime dependencies, no install-time lifecycle scripts, and a non-archived repository. However, it is extremely new: release_history shows only one release on the assessment date, and repo_commit_activity shows no commits or active maintainers in the preceding three months, so long-term maintenance and maturity are unproven. The lack of repository security scanning, a security policy, and explicit workflow token permissions adds moderate transparency and CI-hardening risk, though the analyzed workflow contains no detected dangerous patterns. It is reasonable to evaluate or adopt with normal dependency monitoring, but it should not yet be treated as a mature, well-established dependency.

Latest 1.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so the project has a narrower visible ownership base; this is a modest continuity concern, not a verdict on registry maintainer access.

Release history

Only one release exists and the package is 0 days old, so there is no observed release history or demonstrated maintenance cadence yet.

Repo commit activity

The repository records zero commits and zero active maintainers over the last three months. Given the package's age this may reflect a newly created project rather than collapse, but it leaves maintenance capacity unproven.

Repo tooling

The repository uses Make and Composer build tooling, but no security scanning tools are present; the missing scanning coverage is a moderate hygiene gap rather than evidence of an unsafe package.

Security policy

No security policy was found, reducing transparency about vulnerability reporting and response expectations for dependents.