neuron-php/jobs

This is a reasonably well-supported package with a 610-day history, 21 releases including 15 in the last 12 months, a current unarchived organization-owned repository, comprehensive tests, a clear README, and a permissive MIT license. The main concerns are that the repository shows no commits or active maintainers in the last 3 months despite recent releases, the package remains on an unstable 0.x major version, and repository security hygiene is incomplete because no security scanning, security policy, or top-level workflow permissions are declared. It is usable as a dependency, but adopters should pin versions and review release provenance and maintenance activity.

Latest 0.2.15

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository reports zero commits and zero active maintainers over the last 3 months, a meaningful maintenance concern. Recent releases and the current push date provide some compensating evidence, but do not fully resolve the lack of observed development activity.

Repo popularity

The repository has zero stars, forks, and watchers. This provides little external adoption evidence, but popularity is supporting evidence rather than a health verdict, especially for a relatively young package.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a repository security-hygiene gap.

Security policy

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Token permissions

The CI workflow lacks top-level token permissions declarations. No write permissions were observed, but explicit least-privilege configuration would provide stronger assurance.