uri-interop/interface

The organization-backed repository, detailed README, and release notes provide useful continuity and transparency. Recent activity is thin, security scanning is absent, and all three workflow actions are unpinned, so pinning this version is preferable.

Latest 1.0.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 557 days old with nine releases and a short median interval, but only one release occurred in the last 12 months. The historical cadence is positive while recent release activity is a mild maintenance concern.

Repo bus factor

All recent commits come from one contributor, creating concentration risk. The organization-owned repository provides some ability to hand maintenance off, so this remains a caution rather than a severe risk.

Repo commit activity

Only one commit from one active maintainer was recorded in the last three months. This is thin recent activity, though the repository remains active rather than abandoned.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. For a small interface package this is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment or unsafe code.