phpfui/php-imap

The release includes a clear license, substantial tests, and recent publishing activity. Its small, single-contributor project base and absent security policy leave less maintenance and disclosure resilience than mature alternatives. Workflow references are not pinned, but the audit found no active dangerous patterns.

Latest 0.5.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a user account rather than an organization, so there is no provided organizational backing to offset the concentrated maintenance base.

Repo bus factor

One contributor made all commits in the last three months, giving the project a fully concentrated recent commit base and increasing continuity risk.

Repo commit activity

Only two commits were recorded in the last three months, so activity exists but is light for a package intended to track PHP changes.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established by the collected repository evidence.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.