getpop/filestore

This is a mature and actively maintained release: the package has existed since 2020, has 172 releases including 33 in the last 12 months, and the current stable version was published recently. It has a matching source repository, documented tests, a license file, Composer build tooling, no install-time lifecycle scripts, and organization ownership, all of which support dependable use. The main concerns are that all 14 commits in the last 3 months came from one contributor, repository popularity is very low, and no repository security policy or security-scanning tooling was observed. These are meaningful transparency and bus-factor limitations, but they do not outweigh the strong release and repository activity.

Latest 19.2.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 14 commits in the last 3 months, creating a significant concentration risk. Organization ownership provides some potential handoff capacity, but no second active contributor is shown.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month; this is limited evidence of community activity, though it is not by itself evidence of abandonment.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low counts provide little external validation.

Repo tooling

Composer build tooling is present, supporting reproducible project operations, but no security-scanning tools were detected.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance less formal despite the README containing an email-based security contact.