Package Health

le0daniel/php-ts-bindings

The package is well documented, tested, actively changed, and has a minimal runtime dependency surface. Its beta status, concentrated contributor base, absent security policy, and unpinned workflow actions warrant monitoring before relying on it broadly.

Latest v1.0.0-beta-3PackagistPackagist

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Maintainerscaution

Only one registry maintainer has publish access. This is consistent with the individual-owned repository, but it leaves limited publishing redundancy if that maintainer becomes unavailable.

Project backingcaution

The registry namespace and repository are owned by the same individual account, so the package has direct ownership alignment but no organizational backing indicated by the collected evidence.

Repo bus factorcaution

Two contributors were active, but the leading contributor made about 93% of recent commits. That concentration creates a meaningful continuity risk for this individually owned project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a library handling typed RPC between a backend and frontend, this reduces clarity about vulnerability reporting and response expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leo Studer

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 day ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform