erilshk/qrud

The project is small, with one maintainer, no security policy, and no automated security scanning. It has clear documentation, an MIT license, a stable release, and a recent release history, but the linked repository does not clearly identify this package and has had no commits in three months.

Latest v3.0.0

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the source linkage is not clearly established. This creates a meaningful transparency and provenance concern.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The release pushed at the end of that period shows recent publication activity, but ongoing maintenance is not demonstrated.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, providing little external evidence of adoption or review. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.

Repo tooling

Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For a PHP database library, this leaves vulnerability-reporting and maintenance expectations less clear.