shelfwood/php-pms-clients
This is a healthy, actively maintained release with strong recent publishing activity, a current non-prerelease major version, a directly matching repository, tests, substantial documentation and scaffolding, and recent commits from two evenly contributing maintainers. The main reservations are the very small public adoption footprint, absence of a security policy and explicit workflow token permissions, and registry publishing access held by one person; these are transparency and resilience gaps rather than evidence of abandonment, especially given the repository’s recent activity and balanced contributor split.
84%
Total Score
70
100
89
80
Health checks
Only one account has registry publishing access, which is a resilience concern for release continuity. However, this administrative concentration is mitigated by observed repository activity and should not be treated as evidence that only one person maintains the code.
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance-backup evidence. This is partly offset by the two active contributors shown in recent commit activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently unhealthy for a small package, but it provides little independent evidence of community engagement.
The repository has 0 stars and 0 forks, with one watcher, indicating a very small public adoption footprint. Popularity is supporting evidence rather than a verdict, so this lowers confidence and adds a modest maturity concern but does not outweigh the maintenance evidence.
Composer build tooling is present, but no security-scanning tools were detected. The build setup is appropriate, while the missing scanning coverage is a modest supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joris Schelfhout |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
nesbot/carbon Version ^3.9 | — | — |
fakerphp/faker Version ^1.24 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 15 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.