murdej/activerow

This is a usable, transparently sourced package with a matching repository, an explicit license file, stable releases, recent publication activity, documentation, and no install-time scripts or registry deprecation. The main concerns are the absence of tests in both the artifact and repository, no security scanning or security policy, zero repository commits and active maintainers in the last 3 months despite a release and push on the assessment date, and a very small public footprint. It is reasonable to evaluate for use, but dependency adoption should account for limited validation and a thin maintenance base.

Latest 1.2.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed, which creates some continuity risk; however, the matching user-owned repository and recent release activity provide partial evidence of active ownership.

Package scaffolding

The package includes a README and changelog, but neither the artifact nor repository contains tests. For a database abstraction layer, the absence of visible automated tests is a genuine maintenance and regression-risk gap.

Project backing

The repository is owned by the individual user murdej rather than an organization. Individual ownership is legitimate, but it provides less visible organizational continuity than project-backed ownership.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months. The recent release and push show current ownership, but they do not fully compensate for the lack of sustained development activity.

Repo popularity

The repository has zero stars and forks and one watcher, indicating little external adoption or review. This is supporting caution rather than a verdict, since a small package can still be maintained.