phasync/phasync-ext

It is clearly licensed, documented, tested, and backed by a matching organization repository. The remaining concern is limited evidence of long-term maintenance and weak release-workflow hygiene, so pinning this alpha requires care.

Latest 0.4.0-alpha11

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 1 day old, with all 11 releases published in that period. This shows active initial publishing but provides almost no evidence of sustained maintenance.

Repo commit activity

No commits or active maintainers were recorded in the last 3 months. Because the project is only 1 day old, this is partly explained by its recent creation, but the available history is still too short to demonstrate durable maintenance.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tooling was detected. For a package distributing native prebuilt binaries, that is a modest transparency and assurance gap.

Security policy

The repository has no security policy. This is a minor disclosure-process gap rather than evidence that the package is unsafe.

Version stability

This release is a prerelease, and all recent releases are prereleases. That is expected for an alpha but indicates APIs and behavior may still change.