Package Health/helsingborg-stad/modularity-testimonials

helsingborg-stad/modularity-testimonials

This is a generally healthy release to depend on: it has a long release history since 2017, five releases in the last 12 months, a stable non-prerelease version, no registry deprecation, an active non-archived organization-backed repository, and current release activity. The main concerns are that repository commit activity shows no commits or active maintainers in the last three months, the artifact and repository lack README, tests, and changelog coverage, and the single release workflow lacks top-level token permissions and a security policy. These are meaningful transparency and maintenance-process gaps, but they are outweighed by the package's longevity, recent releases, repository backing, build and security tooling, and clean workflow-risk profile.

Latest 4.0.6

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a resilience concern in isolation. The concern is partly compensated by the linked repository being owned by the Helsingborg Stad organization.

Package file tree

The artifact contains a focused PHP module with Composer metadata and PHPUnit configuration, while the repository includes additional build and lock files. The structure is coherent, although the absence of tests in the tree limits verification evidence.

Package scaffolding

The artifact and repository lack a README, tests, and changelog; GitHub Releases provide some release communication, but the missing documentation and test evidence remain transparency and maintenance gaps.

Repo commit activity

No commits and no active maintainers were observed during the last 3 months, which is a meaningful maintenance-risk signal. The recent release and merged pull request provide some compensation, but do not eliminate the recent commit-activity gap.

Repo popularity

The repository has 1 star and 1 fork, so external adoption evidence is limited. Popularity is supporting evidence only and does not outweigh the stronger maintenance signals.