tyhpdef/firebase-php-jwt

The package is clearly documented, licensed, and tied to an organization-owned repository with matching names. Its single-release history provides little evidence of long-term maintenance yet, so pinning this exact version is prudent.

Latest 7.1.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is the package's first and only release, published less than one day ago, so there is no demonstrated release continuity or maintenance history yet. That is an evidence gap rather than proof of abandonment.

Repo commit activity

There were no commits and no active maintainers in the last three months, but the repository itself was created or updated less than one day ago and the package has only just released. This limits evidence of sustained maintenance without establishing abandonment.

Repo tooling

The repository uses Composer build tooling, appropriate for this package, but no security-scanning tool was detected. For this very small metapackage the omission is a modest hygiene gap, not a severe risk.

Security policy

The repository has no security policy. That reduces transparency for reporting vulnerabilities, although the package is a small type-definition metapackage rather than an application handling credentials.