talis/tripod-php

This is a mature, actively released MIT-licensed package with 62 releases over more than 12 years, seven releases in the last 12 months, a recent release, an unarchived repository, clear package/repository identity, and organization backing. The source repository contains tests and substantial documentation even though the artifact omits tests and a changelog, so those packaging gaps are partly compensated. The main concerns are that all 11 commits in the last three months came from one contributor and the repository has no security policy or security-scanning tooling; these reduce resilience and transparency but are not, by themselves, evidence of abandonment. Overall, it appears reasonable to depend on, subject to normal review of its relatively specialized MongoDB/RDF dependency surface.

Latest 0.32.1

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 11 commits in the last three months, creating a clear continuity risk; organization ownership provides some capacity to hand off maintenance but does not remove the observed concentration.

Repo commit activity

The repository recorded 11 commits in the last three months, indicating current activity, but all activity is concentrated in one active maintainer.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured, leaving a security-process gap in repository hygiene.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stability

Version 0.32.1 is not a prerelease and recent releases have no prerelease share, though the pre-1.0 major status implies API compatibility may require care.