ibexa/polyfill-php82

This is a small, clearly scoped and well-scaffolded package with a stable release, an active non-archived organization-owned repository, tests, explicit licensing, security scanning, and no install-time lifecycle scripts or dangerous workflow patterns. The main concern is limited release history—only three releases over 762 days—and no commits or active maintainers in the last three months, although a release and repository push occurred recently and a pull request was merged. It appears reasonable to depend on, with routine maintenance activity worth monitoring rather than evidence of abandonment.

Latest v1.0.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases across 762 days, with one release in the last 12 months and a median interval of about 381 days; this indicates a slow maintenance cadence, though the latest release is recent.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, which is a maintenance-capacity concern; the recent repository push and release provide only partial contextual compensation.

Repo popularity

The repository has zero stars and one fork, indicating limited adoption or visibility, but popularity is supporting evidence and does not outweigh the package's focused scope and other health signals.

Token permissions

Neither workflow declares top-level token permissions, leaving GitHub Actions permissions less explicit than preferred; there are no observed top-level write permissions.