phpdot/sheets

This is a usable but very young package with clear source alignment, an MIT license, a substantial and coherent file tree, no install-time lifecycle scripts, and a recently pushed non-archived repository backed by an organization. However, it has only three releases over 53 days, remains on the 0.x line, has just one active contributor accounting for all recent commits, and lacks repository security scanning and a security policy. The repository contains tests, which partly offsets the absence of packaged tests, but the limited maintenance history and concentrated bus factor warrant caution before making it a critical dependency.

Latest v0.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 53 days old with three releases, spaced at a median of about 27 days. This shows ongoing publication but provides limited evidence of long-term maintenance maturity.

Repo bus factor

One contributor made all three commits in the last three months, producing a complete concentration of recent activity. Organization backing provides some handoff potential, but no second active contributor is evidenced.

Repo commit activity

There were three commits in the last three months with one active maintainer, and the repository was pushed very recently. Activity is present but sparse and concentrated.

Repo popularity

The repository has zero stars, forks, and watchers. For a package only 53 days old this is weak supporting evidence rather than a standalone abandonment finding.

Repo tooling

Composer build tooling is used, but no security-scanning tooling is detected. The build setup is appropriate, while the absent security automation leaves a hygiene gap.