pudo/pudo-common

Usable with caveats: the release is licensed, documented, non-deprecated, and backed by an active organization-owned repository. Maintenance is thin, with only one release in the last 12 months and one contributor responsible for all recent commits; the repository also has no security scanning or policy.

Latest v0.5.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases since May 2024, but only one release in the last 12 months, indicating a relatively slow maintenance cadence for a dependency.

Repo bus factor

All recent commits came from one contributor, creating a narrow operational base. The organization-owned repository provides some handoff capacity, so this is a concern rather than a severe risk.

Repo commit activity

There was one commit from one active maintainer in the last three months. This is evidence of some ongoing maintenance, but the low activity limits confidence in rapid fixes.

Repo popularity

The repository has zero stars and forks and one watcher, offering little independent evidence of broad adoption. Popularity is supporting evidence only, so this modestly lowers confidence rather than making the package unsafe.

Repo tooling

Composer is used for the build, but no security scanning tools are configured, leaving fewer automated checks for dependency or repository issues.