openpsa/org-openpsa-user

The package is clearly identified, stable, and has a small dependency surface. Maintenance is recent but sparse and concentrated in one contributor, while the organization backing and recent publication reduce abandonment concerns. Missing security documentation leaves a meaningful transparency gap.

Latest v9.11.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 6 years but only 5 releases, with one release in the last 12 months and a typical gap of about 19 months. This indicates slow maintenance rather than abandonment, so it lowers confidence without making the release unfit.

Repo bus factor

All 2 recent commits came from one contributor, so maintenance is concentrated. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

The repository received 2 commits in the last 3 months from one active maintainer. Recent activity is positive, but the low volume provides only modest evidence of ongoing maintenance.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. This offers little community validation, but popularity is supporting evidence rather than a health verdict, especially for a specialized package.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tool is present. The missing scanning reduces assurance modestly rather than indicating abandonment.