stephane888/debug

This is a usable, actively published package with a stable 3.1.0 release, 34 releases since 2021, six releases in the last 12 months, and a non-archived organization-owned repository that matches the package and documents it. However, recent repository activity is absent, with zero commits and active maintainers in the last three months, while the project has no tests, changelog, security policy, or security scanning and has negligible repository adoption. The recent release cadence and organization backing reduce abandonment concerns, but the thin validation and security-maintenance evidence warrant caution before adopting it for critical functionality.

Latest 3.1.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares four runtime dependencies and no development dependencies. This is not excessive, but the absence of dev dependencies provides limited evidence of a maintained test or development setup.

Package scaffolding

A README is present, but neither the artifact nor the repository contains tests or a changelog. For a logging/debug utility this does not make the package unusable, but it reduces transparency and regression confidence.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This conflicts with the recent release cadence and leaves current maintenance activity uncertain.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, indicating negligible independent adoption. Popularity is supporting evidence rather than a verdict, but this weakens external validation.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a maintenance and assurance gap, though it is not by itself evidence of malicious behavior.