makinacorpus/php-lucene

The package has a tiny runtime dependency surface and includes tests, a README, and organization-backed ownership. However, it has had no release in over three years and no recent commits; the linked repository also does not identify this package, so maintenance and provenance deserve caution.

Latest 1.2.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no release in more than three years, with zero releases in the last 12 months. That is a meaningful sign of slowing maintenance, although the package has an established release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity. The repository is not archived, which is only a limited compensating signal.

Repo package mention

The repository name does not match the package and its README does not mention the package, so the source relationship is not clearly established. Organization ownership and the matching package file tree reduce, but do not remove, this provenance concern.

Repo tooling

The repository uses Composer but reports no security-scanning tools. Build tooling supports reproducibility, while the absence of scanning modestly reduces maintenance transparency.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap rather than evidence of an unsafe release.