grayhoax/phpmaxbot

This is a usable but relatively young package with strong basic transparency: it is licensed, includes substantial documentation, tests, examples, a clear file tree, and no install-time lifecycle scripts. Registry activity is frequent and the repository is not archived, but the project remains pre-1.0, has only one commit and one active contributor in the last three months, and all recent commit activity is concentrated in that contributor. The absence of a security policy and security-scanning tooling further limits assurance, so adoption is reasonable with monitoring but carries maintainer-continuity and maturity risk.

Latest v0.23

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. That is a genuine continuity concern for a user-owned project, although repository activity confirms the same owner is still active.

Project backing

The repository owner is an individual user rather than an organization, so there is no organizational maintenance pool to offset the single-maintainer and bus-factor concerns.

Repo bus factor

All one recent commit is attributed to a single contributor, producing a 100% top-contributor share and a very low bus factor for this user-owned project.

Repo commit activity

Only one commit was recorded in the last three months, by one active maintainer. Despite the frequent registry releases, this low recent source activity suggests maintenance may have slowed.

Repo issue activity

There is limited issue activity: one new issue in the last month remains among two open issues, with no closed issues or pull requests in that period. This is a modest responsiveness gap but not evidence of severe neglect on its own.