Package Health/shelfwood/instance-config

shelfwood/instance-config

The package includes a full test suite, a declared MIT license, and three stable releases over four months. The source project has no security scanning or policy, and its repository does not clearly mention the package, increasing transparency concerns.

Latest v1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry maintainer account is consistent with a small user-owned project, but it provides limited redundancy if that maintainer becomes inactive.

Repo commit activity

There were no commits and no active maintainers in the last three months, a meaningful warning that maintenance may have stalled after the latest release.

Repo package mention

The repository name does not match the package name, and no README package mention was found. That makes the package-to-source relationship less clear, despite the similar Shelfwood naming.

Repo popularity

The repository has zero stars, forks, and watchers. This is only supporting evidence, but it offers no external adoption signal to offset the thin maintenance record.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest quality and vulnerability-monitoring gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Shelfwood

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ^11.0\|^12.0	—	—
illuminate/routing Version ^11.0\|^12.0	—	—
illuminate/support Version ^11.0\|^12.0	—	—
illuminate/filesystem Version ^11.0\|^12.0	—	—
shelfwood/settings-yaml Version ^1.0	—	—