phporbit/app

The package includes tests, a README, and a declared MIT license, making it easy to inspect and try. Its short release history and single-contributor activity leave maintenance capacity unproven; the missing security policy adds a smaller transparency gap.

Latest v0.1.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 33 days old and has two releases, with the latest published about one month after the first. This is too little history to establish mature maintenance, though the recent second release is a modest positive.

Repo bus factor

All four recent commits came from one contributor, giving the project a complete single-maintainer concentration. No organizational backing signal compensates for that concentration, so maintenance continuity is uncertain.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The build setup is appropriate, while the absent scanning reduces supply-chain transparency modestly.

Security policy

The repository has no security policy. For a young application template this is a genuine but limited transparency gap, since no other signal shows established vulnerability-reporting procedures.

Version stability

Version v0.1.1 is not a stable major release, so its API and behavior may still change substantially. It is not marked as a prerelease, which partly reduces the concern.