Package Health/sigmaphp/sigmaphp-container

sigmaphp/sigmaphp-container

Usable with caveats: the package is licensed, tested, clearly backed by its matching organization repository, and has release notes, but maintenance appears slow with no releases in the last 12 months and no commits in the last 3 months. Its small user base and limited security tooling add uncertainty.

Latest 0.1.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases have been published over about 2 years and 4 months, with no release in the last 12 months. That is a meaningful sign of slow maintenance for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with no release in the last 12 months, this indicates limited current maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but this provides little external evidence of adoption or community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That leaves a security-process gap, though it is not evidence that the package is malicious.

Security policy

The repository has no published security policy. This weakens vulnerability-reporting transparency, although it is a smaller concern for a small package with no other workflow red flags.