tebru/php-collections

The small dependency surface, included tests, and clear README make the package straightforward to evaluate. Its single-maintainer publishing setup and lack of security scanning add modest ongoing-risk concerns.

Latest v0.3.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was in January 2017, indicating prolonged release inactivity. The seven-release history provides some maturity, but does not offset the long period without updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last release, this is strong evidence of a dormant project.

Repo issue activity

There are no open issues or pull requests, and no recent issue or pull-request activity. This avoids an unresolved-work backlog but also provides no evidence of active maintenance.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tool is present. That is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The repository has no security policy. For a small library this is a minor disclosure-process gap, but it reduces transparency if vulnerabilities are found.