seffeng/lumen-basics

The matching repository, MIT declaration, README, changelog, and stable release provide useful transparency. The small dependency surface and lack of install scripts also reduce routine adoption risk.

Latest v2.0.2

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual account. That is consistent ownership, but it also indicates a single-person project rather than organization-backed maintenance.

Release history

The package has 26 releases since July 2020, but none in the last 12 months and the latest release was about three years ago. This indicates a real maintenance concern despite its earlier regular cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this is evidence of stalled maintenance rather than merely a quiet issue tracker.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less significant for this small utility library than for a security-sensitive component.