Package Health

timbotron/initium-php-core

This is a usable but very young package with coherent source backing, a clear README and file tree, an MIT license, stable-version labeling, active recent publishing, and no install-time or dangerous workflow signals. Adoption carries meaningful maintenance risk because the project is only 3 days old, all six recent commits come from one contributor, there are no tests, no changelog, no security policy, and no security-scanning tooling; the single-user ownership model also provides limited bus-factor resilience. Depend on it cautiously, preferably after reviewing the implementation and establishing a contingency plan for future maintenance.

Latest v1.0.5PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Dependency profilecaution

The package has five runtime dependencies and no development dependencies. The runtime set is moderate and understandable for the documented framework functionality, but the absence of dev dependencies is consistent with the absence of repository tests.

Maintainerscaution

Only one account has registry publish access. That is a real publishing-continuity concern for an individually owned project, though registry access records do not by themselves establish who actively maintains the code.

Package scaffoldingcaution

A substantial README and explicit architecture documentation are present, but neither the artifact nor repository contains tests or a changelog. The missing tests are a genuine maintenance and regression concern for a framework component, while the documentation partially compensates for the missing changelog.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no shown organizational maintenance backing to offset the concentrated ownership and contributor base.

Release historycaution

The package is only 3 days old and has three releases with a median interval of about 1.6 days. The rapid initial release cadence shows activity but provides almost no evidence of long-term maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tim Habersack

Direct Dependencies

DependencyLast ReleaseScore
catfan/medoo
Version ^2.1
—
—
league/plates
Version ^3.5
—
—
vlucas/valitron
Version ^1.4
—
—
nikic/fast-route
Version ^1.3
—
—

Weekly Downloads

Info

Last Published
25 days ago
Created
28 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform