jelix/jcommunity-module

This is a generally healthy and actively maintained release: it has a long history since 2015, 48 releases, three releases in the last 12 months, a stable non-prerelease version, an unarchived repository, clear GPL-2.0 licensing, and a repository that matches and documents the package. The main concerns are concentrated maintenance activity from one contributor, 14 open issues with no recent issue or pull-request movement, and the absence of a security policy or security-scanning tooling. These concerns warrant routine dependency review but do not indicate abandonment, especially given the organization-owned project and recent release and commit activity.

Latest v1.4.7

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing account is listed, which is a potential publishing concentration; however, this is partly compensated by the linked repository being owned by the Jelix organization and by observed recent releases.

Repo bus factor

All 4 recent commits came from one contributor, creating a low individual bus factor; the organization-owned repository provides some capacity to hand maintenance off, so this is a caution rather than a severe risk.

Repo issue activity

There are 14 open issues, with no new or closed issues and no pull-request activity in the last month, indicating limited visible issue handling and a maintenance-transparency concern.

Repo popularity

The repository has 0 stars and 5 forks/watchers, so external adoption evidence is limited; this is supporting context rather than a decisive health problem for a small framework module.

Repo tooling

The project uses Make and Composer, but no security-scanning tools are detected; build tooling is positive while the security-tooling gap modestly lowers transparency.