prism-php/bedrock

Tests, a clear README, MIT licensing, release notes, and organization backing provide strong documentation and ownership context. The repository is not archived and has a security policy, though its recent maintenance record is less reassuring.

Latest v1.8.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package uses post-autoload-dump, post-install-cmd, and post-update-cmd scripts. These add install-time behavior, but the signal provides no evidence that the scripts are unsafe or unusual.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed after the latest release.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with three open issues and three open pull requests, which adds some evidence of limited recent activity.

Repo tooling

The repository uses Composer and Task for build work and has no reported security-scanning tools. The missing scanning is a hygiene gap rather than evidence of abandonment.

Workflow audit

All three workflows were analyzed successfully and have no reported audit findings or untrusted checkouts, but all 8 action references are unpinned, leaving avoidable dependency-integrity exposure in CI.