phylove/common-api

The package is small and easy to inspect, with a matching repository, MIT license, and no install scripts. Its lone maintainer, absent tests, and missing security policy leave limited ongoing support.

Latest v1.7.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 7 years ago, and there have been no releases in the last 12 months. The package has 22 historical releases, but that does not offset the prolonged inactivity.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and indicating little current maintenance capacity.

Maintainers

Only one registry publishing account is listed. This is not inherently unhealthy for a small user-owned project, but combined with the lack of recent activity it increases abandonment risk.

Package scaffolding

The artifact includes a README and the release has a GitHub release, but the README is only 12 characters and the repository reports no tests. Missing tests reduce confidence in ongoing compatibility, while missing changelog files are normal packaging practice.

Repo tooling

Composer is used for the build, which is appropriate for this package, but no security-scanning tooling is present. The absence of scanning is a modest hygiene gap alongside the broader maintenance concerns.