tinywan/webman-horizon

Usable with caveats: the release is clearly packaged, licensed, tested, and backed by a matching repository, but it is too new to have demonstrated stability. Eleven releases arrived within a day, while recorded commit activity shows no active maintainers over the last three months.

Latest v0.0.11

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Project backing

The registry namespace and repository owner both identify the same individual account, Tinywan. This provides direct ownership continuity, but it does not demonstrate organizational backing or a broader maintainer base.

Release history

The package was first released today and has 11 releases in less than one day, with a median interval of about 6 minutes. This shows active initial iteration but provides no meaningful long-term maintenance or release-history evidence.

Repo commit activity

The repository records zero commits and zero active maintainers during the last three months. Although it was pushed today and the package is newly published, the signal provides no established ongoing maintenance track record.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a genuine supply-chain hygiene gap, though it does not by itself show that the package is unsafe.

Security policy

The repository has no security policy. For a package exposing queue monitoring and administrative operations, this reduces transparency around vulnerability reporting, though the package's recent creation limits how much process history could reasonably be expected.