Package Health/precision-soft/symfony-phpunit

precision-soft/symfony-phpunit

This release is generally usable and transparently packaged: it is MIT-licensed, stable, non-deprecated, backed by an organization-owned repository, has a matching repository with tests and changelog coverage, and shows strong recent release activity. The main concern is maintenance continuity: although there were 30 releases in the last 12 months and the repository was pushed recently, repo_commit_activity reports zero commits and zero active maintainers in the last 3 months, so the apparent release cadence may not reflect ongoing development. Zero popularity and absent automated security scanning are additional, lesser concerns, but the repository has a security policy and restrictive workflow permissions.

Latest v3.7.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package declares post-install-cmd and post-update-cmd scripts. These increase installation-time behavior and deserve review, but this signal alone does not establish an unsafe or unmaintainable package.

Repo commit activity

The repository reports zero commits and zero active maintainers in the last 3 months, which conflicts with the strong release cadence and is the primary maintenance-continuity concern for this release.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence and lowers confidence in external adoption, but popularity is not decisive for a small specialized library.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a supply-chain hygiene gap, though it is not equivalent to evidence of malicious behavior.