Package Health

sj-i/php-fuse

The README is clear about requirements but admits documentation is missing, while tests and release notes provide useful coverage. The repository is not archived and has recent activity, but the single-maintainer project remains a narrow support base.

Latest v0.3.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access, leaving a narrow publishing and support base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader institutional support.

Release historycaution

The package has had no registry release for about 5 years, with zero releases in the last 12 months. Recent repository activity partly offsets the concern, but the published dependency is clearly stale.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing development. The recent repository push shown by repository_archived is some compensating evidence, but it does not establish sustained commit activity.

Security policycaution

The repository has no security policy. This is a transparency gap, though it does not by itself show abandonment or make the release unfit to use.

Version stabilitycaution

Version v0.3.0 is not a stable major release, so compatibility expectations are limited. It is not marked as a prerelease, which avoids an additional stability concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

sji

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1
sj-i/typed-cdata
Version 0.0.4
sj-i/phpdoc-type-reader
Version 0.1.0

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform