Package Health/timbotron/initium-php-skeleton

timbotron/initium-php-skeleton

This is a usable but very young package with a clear purpose, a valid MIT license, a matching repository, active recent commits, and no deprecation status. Its main risks are limited maturity evidence: it is only 3 days old, has only two releases, all recent commits come from one contributor, and the artifact and repository contain no tests, changelog, security policy, or security scanning. The small, dependency-light application-skeleton scope makes the lack of packaged tests and changelog less concerning than it would be for a general-purpose library, but developers should still depend on it cautiously and verify the framework dependency and deployment configuration themselves.

Latest v1.0.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publishing access. That is a modest operational resilience concern for a user-owned project, although the repository shows the same active owner rather than conflicting ownership evidence.

Package scaffolding

A substantial README documents the skeleton's layout and setup, and the absence of tests and a changelog is partly expected for a small application starter, though it reduces validation and release-history transparency.

Project backing

The repository is owned by a GitHub user rather than an organization, so there is no organization-level backing to offset the project's single-maintainer concentration.

Release history

The package is only 3 days old and has two releases, so there is very little longitudinal evidence of maintenance or release quality.

Repo bus factor

One contributor made all 3 recent commits, giving the project a single-person bus factor and creating a meaningful continuity risk for a user-owned repository.