rundiz/nested-set

The library has clear licensing, repository tests, a focused dependency set, and documented release notes. Long gaps between registry releases and one active contributor leave maintenance continuity less certain; pin this version and verify compatibility before upgrading.

Latest 1.0.2

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases, with no registry release in the last 12 months and the latest release dating to March 2021. This materially lowers confidence in release maintenance despite recent repository activity.

Repo bus factor

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, so continuity remains concentrated.

Repo commit activity

The repository recorded one commit in the last three months from one active maintainer. This is evidence of some current attention, but the very low volume does not strongly offset the long registry release gap.

Repo tooling

Composer is used for builds, supporting reproducible package management. No security scanning tool is reported, leaving a modest security-process gap.

Security policy

The repository has no security policy. For a database-oriented library, this is a transparency and vulnerability-reporting gap, though it is not evidence of a defect.