getrix/box

Its tiny dependency surface and included tests make the code relatively easy to inspect. The package lacks consumer documentation and security tooling, adding transparency and maintenance concerns.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

This package has had only one release, published over seven years ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its initial release.

Package scaffolding

The package includes tests, which is a small positive, but it has no README for consumers and no changelog. The missing changelog is expected in the artifact; the missing README is a real documentation gap for a library.

Repo popularity

The repository has only 2 stars and no forks, so there is little community evidence to offset the lack of maintenance activity. Popularity is supporting evidence rather than a verdict by itself.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected. For a small package this is a modest transparency and maintenance concern, not a severe risk on its own.