neuron-php/patterns

This release appears generally suitable to depend on: it has a long history since 2020, 29 releases including 11 in the last 12 months, a recent release, a matching organizational repository, tests, documentation, a clear MIT license, and no deprecation or archival status. The main concerns are that the package remains below 1.0, repository commit and issue activity are currently absent, the repository has no security policy or security scanning, and its CI workflow does not declare top-level token permissions. These reduce transparency and maintenance confidence, but the regular release cadence, complete source tree, and repository backing substantially offset the risks.

Latest 0.7.11

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which creates some operational concentration risk. However, the linked repository is owned by an organization and the release history shows regular publishing, so this is not by itself a severe concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing development despite the recent registry release and broader release cadence.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a quiet project, but it provides little evidence of active community maintenance.

Repo popularity

The repository has zero stars, forks, and watchers, providing no external adoption or review evidence. Popularity is supporting evidence rather than a requirement, so this is a modest concern rather than a decisive risk.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a transparency and maintenance gap, not evidence of maliciousness.