qbus/subsite-generator

Its small footprint and lack of a security policy add transparency concerns, though organization backing and a stable release provide some reassurance. Treat 2.4.0 as legacy and pin it only with an ownership plan.

Latest 2.4.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 5 years ago, with no releases in the last 12 months. The package had a reasonable earlier cadence, but the prolonged halt materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with the release pause and indicating no current maintenance capacity.

Package scaffolding

The artifact has no README, tests, or changelog, and the repository also reports none. Missing tests and changelog are not expected in the published artifact, but the absent README modestly reduces consumer documentation for this extension.

Repo popularity

The repository has 0 stars and 0 forks, with only 3 watchers. Popularity is supporting evidence rather than decisive, but these numbers provide little evidence of a broad user or contributor base.

Repo tooling

The repository uses Composer for builds, appropriate for a Packagist PHP package. No security scanning tools are configured, but that is a modest hygiene gap compared with the maintenance evidence.