Package Health

quillphp/quill

The repository has had no commits in five months, and every workflow dependency is unpinned with broad write access. A clear license, repository tests, security policy, and matching source repository provide useful transparency, but the project is still very early.

Latest 0.0.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo commit activitydanger

There were zero commits and zero active maintainers during the last three months, indicating a significant recent maintenance pause despite the repository remaining available.

Dependency profilecaution

Eight runtime dependencies, including native PHP extensions and a separate core package, create meaningful environment and supply-chain coordination requirements for adopters.

Release historycaution

The package is only 167 days old and has just two releases, both published within about nine hours, so its maintenance track record is still limited.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected, leaving an avoidable gap in ongoing project hygiene.

Repository archivedcaution

The repository is not archived, and it was last pushed about five months ago, but that age makes the lack of recent activity more concerning for a young project.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

QuillPHP Team

Direct Dependencies

DependencyLast ReleaseScore
psr/container
Version ^2.0
—
—
psr/simple-cache
Version ^3.0
—
—
vlucas/phpdotenv
Version ^5.6
—
—
quillphp/quill-core
Version ^0.0.2
—
—

Weekly Downloads

Info

Last Published
6 months ago
Created
6 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform