Package Health/sonsofphp/cookie-contract

sonsofphp/cookie-contract

Usable with caveats: the package is clearly licensed, minimally scoped, backed by an organization, and linked to an active repository. However, it has had no registry release in just over two years and no recorded commits in the last three months, so verify ongoing maintenance before adopting it.

Latest v0.3.10

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

Only two releases exist, and the latest registry release was just over two years ago with no releases in the last 12 months. This makes current maintenance and compatibility less certain.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the long gap since the last package release, this is a meaningful maintenance concern.

Repo popularity

The repository has one star and no forks or watchers. This provides little community evidence, but popularity is only supporting evidence and does not outweigh the organization backing or clear package structure.

Repo tooling

Composer is used as the build tool, but no security scanning tool was detected. The missing scanner lowers transparency somewhat, although it is not by itself evidence that the package is unsafe.

Version stability

The assessed version is a non-prerelease 0.x release, so it is usable but may still allow compatibility changes before a stable major version.