tempest/core

This release appears healthy and suitable for dependency use: it is a stable major release with a strong release cadence, was published recently, is not deprecated, and is backed by an active, non-archived organization-owned repository with 50 commits from three maintainers in the last three months. The main concerns are a highly concentrated commit share, the absence of a security policy and security-scanning tooling, and limited repository issue activity, although organizational backing and the strong release/commit activity reduce abandonment risk. The package is licensed and its repository contains tests, while the missing packaged README and tests are largely compensated by the source repository structure.

Latest v3.19.2Packagist

Health Score Breakdown

Repo bus factorcaution

One contributor made 96% of the recent commits, creating concentration risk; however, the repository is organization-owned and two additional maintainers were active, which provides some handoff capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured, leaving a security-hygiene gap without evidence of an active security process.

Security policycaution

The repository has no SECURITY.md or other detected security policy, reducing vulnerability-reporting transparency and response-process visibility.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
filp/whoops Version ^2.15	—	—
symfony/cache Version ^7.3|^8.0	—	—
tempest/support Version 3.19.2	—	—
vlucas/phpdotenv Version ^5.6.1	—	—
tempest/container Version 3.19.2	—	—

View All 7 Dependencies