lume-pack/foundation

The package is MIT-licensed, stable, actively released, and has a modest dependency set. Repository security coverage is limited, and the linked repository does not clearly identify this package.

Latest 2.3.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a minor transparency and consumer-documentation gap for a reusable PHP library.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Frequent registry releases partly offset this, but the source activity still leaves maintenance continuity uncertain.

Repo package mention

The repository name does not match the package name, and README mention status is unavailable. Organization backing makes a monorepo or sub-package plausible, so this is a limited ownership-clarity concern rather than a severe mismatch.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but this provides little independent evidence of community adoption.

Repo tooling

Composer is used for the build, but no security-scanning tool was detected. This is a hygiene gap rather than evidence that the release is unsafe.