tavp/cms

tavp/cms is an actively developed but very young package: 13 releases in 59 days and 102 commits in the last 3 months indicate strong current activity, while its MIT license, changelog, substantial artifact, non-archived organization-owned repository, and lack of install-time scripts support reasonable transparency and adoption safety. However, it remains pre-1.0, has no tests, no security policy or security scanning, and all recent repository commits come from one contributor, creating meaningful maturity, assurance, and bus-factor risks. It is usable for developers comfortable with a fast-moving early-stage dependency, but should be adopted with testing and upgrade review rather than treated as a mature foundation.

Latest v0.5.7

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README and changelog are present, and the repository uses GitHub Releases, supporting transparency; however, neither the artifact nor repository contains tests, which weakens release assurance for a CMS.

Release history

The package is only 59 days old but has 13 releases in that period, showing active iteration while leaving limited evidence of long-term stability.

Repo bus factor

All 102 recent commits came from one contributor, creating a significant continuity and review risk; organization ownership provides some handoff potential but does not demonstrate a second active maintainer.

Repo issue activity

There are no open issues or pull requests and no recent issue or PR activity; this is not a severe concern for a young project, but it provides little evidence of community feedback or external maintenance.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence and may reflect the project's very young age, but it provides no external adoption signal.