toll-mesh/cache

This release has solid structural and transparency indicators: it is Apache-2.0 licensed, includes a README and tests, has a substantial repository tree, uses Composer, has no install-time lifecycle scripts, is not deprecated or archived, and is backed by an organization. However, it is extremely new (two releases within roughly 17 hours), with only one commit and one active contributor in the observed three-month window, all activity concentrated in that contributor. The repository has no security policy, no security-scanning tooling, and two publishing workflows grant top-level write permissions. The package is therefore usable but should be adopted cautiously until its maintenance history, contributor base, and release/security practices mature.

Latest v1.1.1

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is effectively brand new: it has only two releases and an age of zero recorded days, with releases separated by about 17 hours. This leaves maintenance reliability and release-process maturity largely unproven.

Repo bus factor

One contributor accounts for 100% of the single observed commit. Organization backing partly mitigates handoff risk, but no second active contributor is shown, so the current operational bus factor remains weak.

Repo commit activity

Only one commit and one active maintainer are observed over three months. Although the project is new, this provides very little evidence of sustained maintenance capacity.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counters provide no external adoption or community validation for this very new package.

Repo tooling

Composer build tooling is present, but no security-scanning tools are detected. The build setup is positive while the absent security automation is a genuine hygiene gap for a package distributed through multiple publishing workflows.