swoft-fork/bean

The package includes tests, a README, and a matching Apache-2.0 license, but its source has had no commits for about 21 months. Its README also warns that active maintenance is not guaranteed, while workflow action pinning and security-policy coverage are weak.

Latest v2.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published about 21 months ago, with no releases in the last 12 months. The lack of a release cadence materially increases abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push and single registry release, this is strong evidence of stalled maintenance.

Project backing

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintenance record.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and hygiene gap, though it is less severe than the clear maintenance inactivity.

Repository archived

The linked repository is not archived, which leaves a path for future maintenance. Its last push was about 21 months ago, so the non-archived status does not compensate for the observed inactivity.