rodber/php-sse-react

Documentation and packaging are straightforward, with a clear license, release notes, and repository tests. The small project footprint, pre-1.0 status, long release gap, missing security policy, and unpinned workflow actions limit confidence for long-lived production use.

Latest 0.2.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases have been published, with no release in the last 12 months and a long median interval between releases. This points to limited maintenance activity, though the latest release is present and not withdrawn.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. This is a material maintenance and abandonment concern.

Repo popularity

The repository has four stars, no forks, and no watchers, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it offers little evidence of broad community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package intended to handle server-sent events.