openstatspec/php

This release appears suitable to depend on from a maintenance and transparency perspective: it is not deprecated or archived, has a repository that was pushed very recently, shows substantial recent commit and pull-request activity, and includes a substantial README, tests, changelog, build metadata, and a 237-file source tree. The package is still young at 44 days old and remains pre-1.0, while all 97 recent commits come from one contributor; organization ownership partly mitigates the bus-factor concern but does not eliminate it. Missing repository security scanning, an explicit security policy, and top-level workflow permissions are hygiene gaps rather than evidence of abandonment, and the workflow analysis found no dangerous patterns.

Latest v0.8.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Nine releases in 44 days, with a median interval of about 2.3 days and a latest release on the assessment date, show active development; the short history still limits maturity evidence.

Repo bus factor

One contributor made all 97 commits in the last three months, creating a clear continuity risk. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe abandonment finding.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but popularity is not decisive and the active repository signals compensate for the lack of community metrics.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. The build setup is positive while the missing automated security coverage is a hygiene gap.

Security policy

The repository has no SECURITY policy. This reduces transparency around vulnerability reporting, although it does not by itself indicate poor maintenance or unsafe code.