georgringer/faker

It has a README, tests, release notes, and a matching source repository. Workflow references are unpinned and the repository has no security policy, so future maintenance deserves attention.

Latest 2.0.1

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump lifecycle script during installation. This adds installation-time behavior that should be understood before adoption, though the signal does not show that it is harmful.

Project backing

The registry namespace and repository owner match, and the source is owned by an individual rather than an organization. This is consistent ownership, but it provides less organizational continuity.

Release history

The package has only four releases since December 2020, with no release in the last 12 months and a median interval of about 397 days. This indicates a slow maintenance cadence, although the package may be intentionally stable.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Combined with the absence of releases in the last year, this is evidence of quiet maintenance.

Repo tooling

The repository uses Composer for builds, but no security scanning tool was detected. For a small package this is a hygiene gap rather than a severe dependency risk.