Package Health/josemodi97/yii2-ecitizen-gateway

josemodi97/yii2-ecitizen-gateway

This release is usable but still immature. The package has strong basic hygiene: an MIT license, README, changelog, tests in both the artifact and repository, a small runtime dependency profile, no install-time lifecycle scripts, stable-version labeling, and a repository that is actively being pushed and is not archived. However, it is only 17 days old, has produced 19 releases at a median interval of about 17 minutes, and all five recent commits came from one contributor. The repository has no security scanning or security policy, and its CI workflow declares no top-level token permissions. These factors make the package worth evaluating carefully before production adoption, especially given the single-maintainer and rapid-release profile.

Latest v1.6.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a meaningful publishing continuity risk for an independently owned project, although registry access is not itself evidence of maintenance activity.

Project backing

The repository is owned by an individual user rather than an organization, so the single-contributor and single-publisher concentration is not offset by demonstrated organizational backing.

Release history

The package is only 17 days old and has 19 releases, with a median release interval of about 17 minutes; this indicates active iteration but limited maturity and unusually rapid release churn.

Repo bus factor

One contributor made all five recent commits, creating a concentrated bus factor and leaving no demonstrated second maintainer to provide continuity.

Repo issue activity

There are no open issues or pull requests and no activity in the last month. With only 17 days of project history this is ambiguous rather than evidence of abandonment, but it offers little evidence of external review or community support.