Package Health

locomotivemtl/charcoal-user

The repository is well documented, tested, licensed, and backed by an organization with a security policy. Recent maintenance is sparse and concentrated in one contributor, while repository security scanning is not configured.

Latest 0.7.0.3PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package has 35 releases since January 2017 and a release on September 1, 2026, but only one release in the last 12 months compared with a historical median interval of about 12 days. This indicates a marked slowdown without showing abandonment.

Repo bus factorcaution

All recent commits come from one contributor, leaving no demonstrated second active contributor to provide continuity. Organization backing partly reduces the handoff risk but does not remove the concentration concern.

Repo commit activitycaution

Only one commit was made in the last 3 months by one active maintainer. The recent release shows the repository is not abandoned, but this is still light current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap, not evidence that the release is unsafe, especially because a security policy is present.

Version stabilitycaution

Version 0.7.0.3 is not a stable major version, but it is not marked as a prerelease and recent releases have no prerelease share. The versioning is therefore a modest maturity concern rather than a release blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mathieu Ducharme

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0
—
—
locomotivemtl/charcoal-core
Version ~0.4
—
—
locomotivemtl/charcoal-config
Version ~0.10
—
—
locomotivemtl/charcoal-object
Version ~0.7
—
—
locomotivemtl/charcoal-factory
Version ~0.4
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform