Package Health/umityatarkalkmaz/encryption

umityatarkalkmaz/encryption

This is a small, clearly structured PHP package with an MIT license, README, changelog, tests, a minimal runtime dependency profile, and no install-time lifecycle scripts. The main concern is that it is extremely new, with only two releases over less than one day and no observed commit activity in the last three months; this may simply reflect its recent creation, but provides little evidence of sustained maintenance. The repository is not archived and the README identifies the package despite the repository name mismatch. Missing security scanning, security policy, and explicit workflow token permissions are transparency and hardening gaps, though the analyzed workflow shows no dangerous patterns.

Latest v2.1.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

There is one registry publisher. Because the project is user-owned rather than organization-backed, this represents a thin publisher base and a potential continuity concern.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing signal to offset the single-maintainer structure.

Release history

The package has only two releases and is less than one day old, so there is not yet evidence of sustained release maintenance; its very recent creation partly explains the limited history.

Repo commit activity

No commits or active maintainers were observed in the last three months. Since the package is newly released, this may reflect its age, but it leaves sustained maintenance unproven.

Repo popularity

The repository has one star, zero forks, and one watcher. This is limited adoption evidence, but popularity is only supporting evidence and does not independently make the package unsafe.