tyhpdef/rector-rector

The Apache-2.0 license, organization-backed repository, and focused Composer dependency are reassuring. Its minimal metapackage structure is appropriate, but there is not yet evidence of sustained maintenance or security processes.

Latest 2.6.7

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package is newly published, with one release and no prior cadence, so sustained maintenance cannot yet be demonstrated. The lack of history is a caution rather than evidence of abandonment at this age.

Repo commit activity

There were no commits or active maintainers in the preceding three months, but the package is only hours old and the repository was pushed at publication. This limits evidence of ongoing maintenance without indicating abandonment yet.

Repo tooling

The repository uses Composer, appropriate for this package, but no security-scanning tools were detected. For a tiny type-definition metapackage this is a modest hygiene gap, not a severe risk.

Security policy

No repository security policy was found. This reduces transparency for reporting vulnerabilities, though the package's narrow metapackage role limits the significance of the gap.