Package Health

sandermuller/richter

Healthy and actively maintained, with strong project transparency and unusually frequent recent development. Install with normal care for a pre-1.0 package: it has a single registry maintainer, install-time scripts, and a small contributor base.

Latest v0.69.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Lifecycle scriptscaution

The package defines post-autoload-dump, post-install-cmd, and post-update-cmd scripts, which add install-time behavior and deserve review before adoption.

Project backingcaution

The repository is owned by an individual rather than an organization, and the registry has one publishing maintainer. The active commit record compensates for some capacity risk, but long-term continuity depends heavily on that individual.

Release historycaution

The package is only 61 days old but has 87 releases, with releases arriving roughly every 6 hours. This shows active iteration but leaves limited long-term maintenance history.

Repo popularitycaution

The repository has only 3 stars and no forks or watchers. This is limited supporting evidence, but popularity alone does not outweigh the strong maintenance and transparency signals.

Token permissionscaution

Four workflows declare read-only permissions, but one workflow grants top-level write access and another lacks top-level permissions, leaving some CI permission hygiene to review.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sander Muller

Direct Dependencies

DependencyLast ReleaseScore
symfony/finder
Version ^7.2||^8.0
nikic/php-parser
Version ^5.0
illuminate/console
Version ^12.0||^13.0
illuminate/process
Version ^12.0||^13.0
illuminate/routing
Version ^12.0||^13.0

Weekly Downloads

Info

Last Published
5 days ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform