erikwang2013/poster-php

This release appears usable and actively maintained: it is not deprecated or archived, has a stable version, recent publishing and repository activity, a clear MIT license, a substantial file tree, and repository tests that compensate for tests not being packaged. The main concerns are the package's short 115-day history, one-person maintenance and commit concentration, install/update lifecycle scripts, absent security scanning and security policy, and workflows without top-level permissions declarations. The package is therefore a reasonable dependency with elevated maintainer-continuity and repository-hygiene risk, rather than a clearly mature or low-risk foundation.

Latest v1.2.10

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Lifecycle scripts

The package runs post-install-cmd and post-update-cmd scripts, adding install-time execution and supply-chain exposure that a dependency consumer should review.

Project backing

The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.

Release history

The package is young at 115 days old but has 31 releases, including 29 in the last 12 months, with a median interval of about 2 hours 15 minutes; this shows active delivery but limited long-term maturity and unusually rapid release cadence.

Repo bus factor

All 38 commits in the last three months came from one contributor, with a single active maintainer and 100% commit concentration, creating a meaningful continuity risk for a user-owned project.

Repo issue activity

There are no open issues or pull requests, but there has also been no issue or pull-request activity in the last month; this is neutral to mildly limiting evidence rather than proof of abandonment.