Package Health/laposta/laposta-signup-basic

laposta/laposta-signup-basic

This release appears generally suitable to depend on: it is licensed, non-deprecated, stable, linked to a matching organization-owned repository, and has a recent release cadence with six releases over 161 days. The repository is not archived and shows recent activity, but maintenance evidence is still narrow: only two commits in the last three months came from one contributor, the repository has no security scanning or security policy, and its workflow does not declare top-level token permissions. The package is relatively young, so its long-term maintenance track record remains limited; dependency risk is otherwise low because it declares only PHP as a runtime dependency.

Latest 3.5.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All two recent commits came from one contributor, creating a concentrated maintenance dependency; organization ownership partly mitigates handoff risk but does not remove the thin observed contributor base.

Repo commit activity

Two commits were made in the last three months by one active maintainer, demonstrating recent maintenance but at a low pace.

Repo issue activity

There are no open issues or pull requests and no activity in the last month. This is not inherently negative, but it provides little evidence of an active user or maintainer feedback loop.

Repo popularity

The repository has only 2 stars and 1 fork, indicating limited adoption evidence; this is supporting context rather than a decisive health problem for a small package.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a security-hygiene gap that is relevant to dependency maintenance.