Package Health/openpsa/org-openpsa-widgets

openpsa/org-openpsa-widgets

Usable with caveats: this stable package is actively maintained and backed by the OpenPSA organization, but releases are infrequent and recent work comes from only one contributor. The repository also lacks a security policy and has little public adoption.

Latest v9.11.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 4 years, but only 4 releases have been published and there was just 1 release in the last 12 months, with a median interval of about 566 days. This indicates slow release cadence rather than abandonment, since a release was published recently.

Repo bus factor

All 2 recent commits came from one contributor. The OpenPSA organization provides some handoff capacity, but recent maintenance is still concentrated in a single person.

Repo commit activity

The repository recorded 2 commits in the last 3 months, showing recent maintenance but at a low pace. This supports continued activity while leaving limited evidence of substantial ongoing development.

Repo tooling

The repository uses Composer for builds, but no security-scanning tools were detected. The build tooling is appropriate for the ecosystem, while the missing scanning reduces transparency around automated checks.

Security policy

No security policy was found in the repository. This is a transparency gap for reporting and handling vulnerabilities, though it is not by itself evidence that the package is unsafe.