substancephp/sql

This is a generally healthy, actively maintained package with a matching repository, clear MIT licensing, tests, changelog, CI, and recent release and commit activity. The main adoption risks are its pre-1.0 status, very small and concentrated contributor base, lack of repository security scanning and a security policy, and negligible repository popularity; these suggest increased dependence on the organization and maintainer for continuity, but do not indicate abandonment or unfitness to use.

Latest v0.10.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 6 commits in the last 3 months, giving the project a very low bus factor; organization backing provides some handoff potential but does not remove the observed concentration risk.

Repo commit activity

The repository recorded 6 commits in the last 3 months, but all were made by one active maintainer; the activity is recent while the capacity is narrow.

Repo popularity

The repository has zero stars, forks, and watchers, so there is little external adoption evidence; this is supporting caution rather than a decisive health concern because active maintenance is demonstrated elsewhere.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a security-process gap that is relevant to dependency maintenance.

Security policy

No SECURITY.md or equivalent security policy was found, reducing transparency about vulnerability reporting and response procedures.