forumaker/profile-cover

This release appears suitable to depend on, with strong evidence of active maintenance and reasonable package hygiene: it has 12 stable releases over 132 days, was pushed recently, includes tests, a complete source tree, an MIT license, and no deprecation or install-time lifecycle scripts. The main risks are that all 38 recent commits come from one contributor, the repository has no security scanning or security policy, and the project has no observable popularity or issue activity; these reduce resilience and transparency but do not outweigh the current release and maintenance signals.

Latest 2.8.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account, forumaker, has publish access. This is a resilience concern for a user-owned project, although the repository's active commit history provides some compensation.

Project backing

The repository owner is a user account rather than an organization, so there is no organizational maintenance buffer to offset the single-maintainer concentration.

Repo bus factor

One contributor made all 38 commits in the last three months, giving the project a high bus-factor risk despite the strong commit volume.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This provides little evidence of community support or review, though it is not a direct maintenance failure.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation but is not by itself evidence of abandonment.