lys/spring-php

The matching repository, Apache-2.0 licensing, release notes, and small dependency surface provide useful transparency. There is no security policy, and the project offers little evidence of a current maintenance process.

Latest v0.1.6

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was nearly three years ago, and there were no releases in the last 12 months. This is strong evidence of stalled maintenance for a framework dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is substantial evidence that development has stopped.

Project backing

The source repository is owned by an individual account rather than an organization. This is not inherently unhealthy, but it offers less visible institutional backing for a project already showing no recent activity.

Repo popularity

The repository has only 5 stars, 3 forks, and 1 watcher. Popularity is not decisive, but these low adoption signals provide little supporting evidence of sustained community oversight.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a maintenance and transparency gap, though it does not by itself make the release unfit.