losthost/simple-ai-core

The linked project has tests, a README, an MIT license, and a GitHub release for this version. Its repository has had no commits for about six months, and the package is not named or mentioned in that repository; the missing security policy adds a smaller transparency concern.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. For a package this young, that is a meaningful abandonment warning.

Project backing

The package is backed by an individual GitHub user rather than an organization, so the single registry maintainer represents a genuinely narrow ownership base.

Release history

The package is only about six months old and has three releases, but all three arrived within about 25 minutes, so there is not yet a sustained release pattern.

Repo package mention

The repository name does not match the package name and its README does not mention the package. This makes the package-to-source relationship unclear and raises a piggybacking concern.

Repo tooling

The repository uses Composer, but no security-scanning tool was detected, leaving a modest repository hygiene gap.