phpdepend/callmap

The package has a clear README, release notes for this version, and a small dependency footprint. Its tiny repository and lack of recent activity leave limited evidence of ongoing maintenance.

Latest 0.2.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the three months before collection. Combined with the old last release, this is the clearest evidence of inactive maintenance.

Release history

Only two releases were published, both within about two days in October 2024, with no releases in the past 12 months. This leaves a meaningful maintenance concern for a package now about two years old.

Repo popularity

The repository has only 3 stars and 2 forks. Low popularity is supporting evidence of a small project, not a severe concern by itself, especially with organization backing and a matching repository.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone adoption blocker.

Security policy

No security policy was found in the repository. For a small PHPStan plugin this is a hygiene gap, but it does not outweigh the available licensing and source documentation.