Package Health/peopleinside/flarum-ext-first-post-approval

peopleinside/flarum-ext-first-post-approval

This release appears suitable to depend on, with strong evidence of active maintenance and coherent packaging: it is not deprecated or archived, has a matching repository with a README and license, uses stable versioning, and has 63 commits plus four merged pull requests in the recent period. The main concerns are that all recent commits come from one contributor, the repository has no tests or changelog, and no security-scanning tooling is reported; the repository is also very small and has no recorded popularity. These are meaningful transparency and bus-factor limitations, but they are outweighed by the recent release and commit activity, explicit security policy, clean lifecycle configuration, and complete package structure.

Latest 2.2.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Three registry publishing entries are present, although two are the same PeopleInside identity. This offers some publishing coverage but does not establish a broad active maintainer base.

Package scaffolding

A substantial README is present and the repository uses GitHub Releases, but neither the artifact nor repository contains tests or a changelog. The missing tests and changelog reduce maintenance transparency because no compensating test evidence is provided.

Project backing

The repository is owned by a user account rather than an organization, so there is no organizational backing evidence to offset the concentrated maintainer activity.

Release history

The package is only 82 days old but has 25 releases, all within the last 12 months, with a median interval of about 7 hours. This demonstrates active iteration, though the short history limits evidence of long-term maturity.

Repo bus factor

One contributor made all 63 commits in the last three months, giving the project a bus factor of one. Because the owner is a user rather than an organization, there is no provided project-backing evidence to compensate for this concentration.