murdej/php-libs

This release appears suitable to depend on: it is a stable, non-prerelease version with a 747-day release history, a recent release, an unarchived repository, current commit activity from two contributors, clear licensing, tests, documentation, and a changelog. Its main limitations are a very small repository footprint and audience, concentration of 80% of recent commits in one contributor, and no security policy or security-scanning tooling. These are meaningful transparency and resilience gaps, but they do not outweigh the evidence of recent maintenance and coherent package/repository alignment.

Latest v1.10.1

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a user account rather than an organization, so there is no organization-level maintenance backing to offset the concentrated contributor activity.

Repo bus factor

Recent work involves 2 contributors, but the top contributor produced 80% of the commits, leaving maintenance meaningfully concentrated in one person. The second contributor provides some resilience, so this is caution rather than danger.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small package because it may reflect low reported demand, but it provides little independent evidence of community engagement.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher, indicating very limited external adoption or review. Popularity is supporting evidence rather than a verdict, so this is a caution rather than a severe health failure.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing security automation is a transparency and maintenance gap, though the package has no reported dangerous workflows and recent commits provide some compensating evidence.