phprise/dto-trait

Usable with caveats: it has clear licensing, repository backing, tests, and a security policy, but only one release exists and the repository has had no commits in the last three months. The README still contains placeholder usage text, and the install-time script adds some operational risk.

Latest v1.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers during the last three months. For a package only 107 days old, this is a meaningful warning that development may have stalled.

Lifecycle scripts

The package defines a post-create-project-cmd install-time script. This is not inherently unsafe, but it increases dependency-installation complexity and deserves review before adoption.

Release history

The package is 107 days old and has only one release, so there is little evidence of sustained maintenance or release maturity.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption signal for this new package.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The security gap is partly offset by the repository's separate security policy.