konkretny/yesframework

Usable with caveats: this is a very young package with only one published release and all recent repository work from one maintainer. It has tests, a clear MIT license, a matching source repository, and no deprecation or risky install workflows, but its long-term maintenance is not yet demonstrated.

Latest 3.2.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository owner match, indicating the package is backed by the same individual rather than borrowing an unrelated project repository. The owner is a user account, so organizational maintenance capacity is not demonstrated.

Release history

The package is only 82 days old and has one release, so there is little evidence of an established release process or long-term maintenance. This is partly offset by seven repository commits in the last three months.

Repo bus factor

All seven recent commits came from one contributor, creating a genuine single-maintainer continuity risk. The matching personal repository provides some backing, but no second active contributor is shown.

Repo popularity

The repository has zero stars, forks, and watchers, so there is no community adoption evidence to compensate for the package's short history and concentrated maintenance.

Repo tooling

Composer is used for builds, but no security-scanning tool is configured. This is a transparency gap rather than a severe risk, especially since the dependency profile is small.