stoic/web

A GitHub release documents the fix, and the project includes tests and an Apache-2.0 license file. The small contributor footprint, absent security policy, and install-time project script leave less assurance for long-term use.

Latest 1.4.2

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines a post-create-project-cmd script, which runs during Composer project creation and deserves attention because install-time behavior can affect consumers. The signal does not show that the script is harmful, so this is a limited concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent registry release partly offsets this, but the lack of current source activity weakens confidence in ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only two watchers, indicating limited visible adoption. Popularity is supporting evidence only, so this modestly reduces confidence rather than determining the verdict.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance gap rather than evidence of a security flaw.

Security policy

The repository has no security policy. That leaves vulnerability-reporting and response expectations unclear for a web framework component.