lexide/syringe

Healthy and reasonable to depend on, with strong project history, clear licensing, tests, and a current stable release. Recent repository activity is quiet and the project lacks security tooling, so review maintenance periodically.

Latest 3.0.0

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a maintenance concern for a dependency. However, the package has a release in the last year and the repository was recently pushed, so this is caution rather than abandonment evidence.

Repo issue activity

The repository has six open issues but no issues or pull requests were opened, closed, or merged in the last month. That indicates limited visible issue-tracking activity and modestly reduces confidence in responsiveness.

Repo popularity

The repository has no stars and only one fork, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, and the long release history and organization backing compensate for the limited adoption signals.

Repo tooling

Composer build tooling is present, but no security-scanning tool is configured. This is a transparency and process gap, though it is not by itself evidence that the package is unsafe or abandoned.

Security policy

The repository has no published security policy. That makes vulnerability-reporting expectations less clear, but it is a moderate hygiene gap rather than a severe dependency risk given the package's release history and tests.