phpbb/skeleton

Clear licensing, tests, release notes, and a small dependency footprint support dependable use. Ownership continuity merits attention because recent work is concentrated in one contributor, while workflow references are unpinned.

Latest 1.2.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 31 releases over 372 days and a release within the assessed period, though only two releases occurred in the last 12 months and the reported median interval is zero days.

Repo bus factor

All 14 recent commits came from one contributor, giving the project a concentrated maintenance base. Organization backing provides some handoff capacity, but no second contributor was active in the measured period.

Repo tooling

The project uses Composer and Phing for builds, which supports repeatable packaging, but no security-scanning tools were detected.

Security policy

The linked repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself indicate abandonment.

Workflow audit

Both workflows were analyzed without audit findings or untrusted execution sinks, but both action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns rather than a severe risk without an untrusted trigger.