shkilya/geophp

The package includes a substantial README, tests, a clear license, and only one runtime dependency. There is no registry deprecation or install-time script, but security-policy and broader repository activity evidence are limited.

Latest 3.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it provides no organizational handoff benefit alongside the single-contributor activity.

Release history

This is the first and only release, published 56 days ago. That is too little history to demonstrate long-term maintenance, although the package is still relatively new.

Repo bus factor

All repository commits in the last three months came from one contributor. The user-owned project has no shown organizational backing to compensate for that concentration.

Repo commit activity

Only one commit was recorded in the last three months. Because the package is only 56 days old, this is limited evidence rather than proof of abandonment, but it does weaken maintenance confidence.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not a standalone severe risk.