estebanforge/hyperfields

This release appears suitable to depend on: it is actively maintained, non-deprecated, linked to a matching repository, has a substantial documented file tree, stable release metadata, and a lean runtime dependency profile. The main risks are concentration of maintenance in one contributor, very low repository popularity, and limited explicit security-process evidence; however, the repository is active rather than archived, includes tests and a changelog, and the package declares a GPL-2.0-or-later license.

Latest 1.6.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a modest operational concentration risk, although the repository activity confirms that the account is actively publishing rather than merely holding access.

Project backing

The repository owner is a user account rather than an organization, so there is no organizational backing to compensate for the concentrated maintainer base.

Repo bus factor

One contributor made 55 of 55 commits in the last three months, giving a 100% top-contributor share. This is a genuine continuity risk for a user-owned project without organizational backing.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean queue is positive, but the absence of external activity limits evidence of community support.

Repo popularity

The repository has 3 stars, 0 forks, and 0 watchers. This does not establish a health failure for a small package, but it provides little external adoption evidence.