Package Health/systopia/de.systopia.remoteevent

systopia/de.systopia.remoteevent

The package includes tests, documentation, and release notes for this version. Workflow controls are strong, though the contributor base is concentrated and no security policy is published.

Latest 1.5.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A pre-update-cmd lifecycle script runs during package updates, adding a small amount of install-time execution complexity. No other evidence shows that this script is unsafe, so this is a limited hygiene concern.

Repo bus factor

Two contributors were active recently, but the top contributor made 10 of 11 commits, or 91%. Organization backing partly offsets this concentration, but the project still depends heavily on one active individual.

Repo issue activity

The repository has 16 open issues and no issues closed in the last month, which leaves some maintenance backlog. One pull request was merged during the same period, so activity has not stopped.

Repo package mention

The repository name matches the package, but its README does not mention the package name. The matching repository reduces the concern, though the missing README reference leaves a minor provenance gap.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence of unsafe code.