getpop/componentrouting

This is a mature, actively released, stable package with 162 releases since 2021, 33 releases in the last 12 months, a current non-archived repository, explicit licensing, tests, and a repository that clearly matches the package. The main concerns are that all 14 commits in the last 3 months came from one contributor, the repository has no security policy or security-scanning tools, and its very low popularity provides little external validation; the organization backing and strong release cadence partly mitigate the maintainer-concentration concern. Overall, it appears reasonable to depend on, with normal operational safeguards and awareness of its limited contributor redundancy.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a modest publishing continuity concern, though the linked repository is owned by an organization and the package has a strong release history.

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a real continuity risk; organization ownership provides some handoff potential but no second active contributor is shown.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher, so there is little external adoption evidence; this is supporting caution rather than a health verdict.

Repo tooling

Composer build tooling is present, but no security-scanning tools are reported, leaving a security-hygiene gap.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.