prelumen/analytics-core

The package is clearly structured, documented, tested, and has a focused dependency set. Security governance is limited, with no policy or scanning, and its maintenance record is too short to establish ongoing support.

Latest 1.0.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's first release, published today, so there is no release history or cadence demonstrating sustained maintenance. Its stable 1.0.0 version provides some maturity signal but cannot offset the lack of history.

Repo commit activity

There were no commits or active maintainers in the three-month activity window beyond the initial publication, so ongoing maintenance capacity is unproven. The repository's same-day push is consistent with a new project but does not establish continuity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The tests and static-analysis configuration compensate for some quality concerns, not the missing security coverage.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified. The package's tests and license improve transparency but do not replace security-response guidance.

Workflow audit

No GitHub Actions workflows were present, so there were no workflow risks to identify and no audit failures. This also provides no automated CI or release assurance.