naf/board

The package includes tests, release notes, documentation, and an actively contributing organization-backed project. Its short history, early version line, absent security scanning, and unpinned workflow actions leave meaningful maturity and build-integrity concerns.

Latest v0.1.3

Packagist

70%

Total Score

Maintainer Stability

100

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 25 runtime dependencies, including many NAF framework components and extensions. This is substantial coupling for a v0.1 package and increases upgrade and compatibility risk, though the dependencies fit its role as a full application plugin.

Release history

The package is only 1 day old with 4 releases, and the median release interval is about 1 hour 27 minutes. This shows active initial development but provides little evidence of long-term maintenance stability.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a package with application, database, authentication, and storage functionality, that is a modest supply-chain hygiene gap.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although the active organization-backed project provides some compensating maintenance capacity.

Version stability

Version v0.1.3 is not a stable-major release, so its API and behavior may still change. It is not marked as a prerelease, which partly reduces the concern.