sympress/migration

Its short history leaves limited evidence of long-term stability. Organization backing, release notes, tests, and a security policy provide meaningful continuity despite maintenance being concentrated in one contributor.

Latest 1.0.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package is only 95 days old with two releases, so its long-term maintenance record is still limited; the 4-day median release interval shows an active start.

Repo bus factor

All 13 recent commits came from one contributor, creating a genuine continuity risk; organization ownership provides some potential handoff capacity but no second active contributor is shown.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest supply-chain hygiene gap.

Workflow audit

Both workflows were fully analyzed with no audit findings or untrusted execution paths. However, one workflow grants top-level write access and four of seven action references are unpinned, which weakens workflow hygiene without indicating a severe risk.