m0hanraj/phpcs-config

The repository is small but matches the package, includes useful documentation, MIT licensing, and Composer and Dependabot tooling. Its zero recent commits and releases suggest maintenance has stalled, while the missing security policy leaves less transparency.

Latest v0.2.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, which is consistent with direct ownership but provides a thinner backing structure than an organization-owned project.

Release history

The package has had four releases, but none in the last 12 months; its last release was about a year ago. The releases were also published in a very short burst, so ongoing maintenance is uncertain.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly a year without a new release and increasing abandonment risk.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a modest concern rather than evidence that the package is unsafe.

Version stability

Version v0.2.1 is not a stable-major release, which signals an immature API. It is not marked as a prerelease, partly reducing the concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mohanraj

Direct Dependencies

Dependency	Last Release	Score
automattic/vipwpcs Version ^3.0	—	—
fig-r/psr2r-sniffer Version ^2.1.2	—	—
slevomat/coding-standard Version ^8.14	—	—
wp-coding-standards/wpcs Version ^3.1	—	—
ergebnis/composer-normalize Version ^2.42	—	—