microscrap/sdl3-gfx

Usable with caveats: it is actively developed, clearly licensed, and backed by a matching organization repository with tests. It is still a young package with all recent commits from one contributor and no security policy, so maintenance continuity is not yet proven.

Latest 0.7.3

Packagist

72%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Five runtime dependencies, including PHP, ext-sdl3, microscrap/sdl3, and scrapyard-io/tubes, create meaningful compatibility requirements for this specialized graphics integration. The profile is understandable and not unusually broad, but the native extension and ecosystem coupling narrow portability.

Repo bus factor

All 17 commits in the last 3 months came from one contributor, giving the project a very low individual bus factor. Organization backing provides some handoff capacity, but no second active contributor is shown to demonstrate that capacity in practice.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence for adoption, but popularity is not required for a small, specialized package and does not outweigh its recent development activity.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. The build setup is appropriate, while the missing scanning layer is a modest transparency gap for supply-chain maintenance.

Security policy

The repository has no security policy. That does not indicate unsafe code by itself, but it leaves vulnerability reporting and response expectations undocumented.