phpcr/phpcr-api-tests

Its MIT/Apache licensing, substantial README, and included tests make the package transparent and straightforward to evaluate. The repository is not archived and is clearly organization-backed, but it lacks a security policy and recent activity is quiet.

Latest 2.1.25

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 27 releases since October 2013, but none in the last 12 months and the latest registry release was in December 2023. The repository push in November 2025 provides some compensating evidence, but registry maintenance is still stale.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The November 2025 push prevents this from proving abandonment, but the current maintenance gap remains a concern.

Repo issue activity

Six issues and four pull requests remain open, with no issues closed or pull requests merged in the last month. This suggests limited current responsiveness, though the backlog is small.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a test-suite package this is a modest transparency and maintenance weakness rather than a severe risk.

Security policy

The repository has no security policy. This weakens disclosure transparency, although the package is a compliance test suite rather than a security-sensitive runtime component.