fab2s/filelock

Clear documentation, tests, and a recent release improve day-to-day confidence. Workflow references are unpinned, and the small project has no security scanning, leaving less independent review.

Latest 1.1.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

Composer post-install and post-update scripts increase the actions performed during dependency installation or updates. No provided signal shows these scripts are harmful or unnecessary, so this is a moderate supply-chain hygiene concern.

Project backing

The package and repository are owned by the same individual account rather than an organization, so the concentrated maintainer and contributor activity reflects the project's actual backing.

Release history

The package has only three releases since 2019, with long gaps between them, although one release arrived in the last 12 months. This suggests a small, infrequently changing project rather than abandonment.

Repo bus factor

One contributor made all two commits in the last three months, giving the project a concentrated bus factor. The recent activity is positive, but there is no demonstrated backup maintainer.

Repo commit activity

Two commits were made in the last three months, showing recent activity, but all activity came from one active maintainer. This supports current maintenance while limiting evidence of broader capacity.