romeldev/php-fhir-r4

The package has a clear repository match, a real license file, and only PHP as a runtime dependency. The declared MIT license conflicts with the detected Apache-2.0 file, and the repository has no security policy.

Latest v1.0.0

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release since November 2024, with no releases in the last 12 months; that strongly suggests an immature or abandoned dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

License

The release includes a license file, so it is not unlicensed, but the manifest declares MIT while the detected file says Apache-2.0; that mismatch requires legal clarification before adoption.

Package scaffolding

A short README helps installation, but the artifact and repository contain no tests or changelog. Missing tests are a meaningful maintenance gap for a large library, while the missing changelog is less important for a one-release package.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present and there is no other provided evidence of automated security checks.