m0hanraj/phpstan-config

The package has a useful README, a clear MIT license, release notes, and Composer-based tooling. Its single release and no commits in the past three months leave maintenance uncertain, so pin this version rather than assuming ongoing support.

Latest v0.1.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published 382 days ago, with no releases in the last 12 months. That is meaningful evidence of limited maturity and uncertain ongoing maintenance.

Lifecycle scripts

The package defines post-install and post-update Composer scripts. Install-time scripts deserve extra scrutiny because they run during dependency operations, although this signal alone does not establish a maintenance failure.

Repo commit activity

The repository has recorded 0 commits and 0 active maintainers in the past three months. For a package released only once, this reinforces the risk that maintenance has stopped.

Security policy

The linked repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is less significant for this small configuration package than the maintenance evidence.

Version stability

The current version is v0.1.0 and is not marked prerelease, but it remains an initial major version with no later stable major release. This is consistent with an early-stage package and limits confidence in its maturity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mohanraj

Direct Dependencies

Dependency	Last Release	Score
ergebnis/composer-normalize Version ^2.42	—	—
phpstan/extension-installer Version ^1.3	—	—
phpstan/phpstan-strict-rules Version ^1.5	—	—
swissspidy/phpstan-no-private Version ^0.2.0	—	—
szepeviktor/phpstan-wordpress Version ^1.3	—	—