phicorp/maya

The MIT declaration, stable versioning, and non-archived organization-owned repository are reassuring. The package has no security policy or automated security scanning and lacks a README; its small dependency set is otherwise manageable.

Latest 1.3.3

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The package contains no README, which makes integration harder for this library. Missing tests and changelog files are normal in published artifacts, while a GitHub release exists for this version.

Release history

The package has had no release in about 18 months, despite 13 releases during its first four months. This indicates a substantial maintenance pause for a relatively young project.

Repo commit activity

There were no commits and no active maintainers during the last three months, consistent with the broader pause since March 2025. This materially raises abandonment risk for a young framework-style package.

Repo popularity

The repository has 3 stars, 0 forks, and 1 watcher. This is very limited adoption evidence and provides little external confidence, though popularity alone is not decisive.

Repo tooling

Composer is used for builds, but no security scanning tool is configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.