utopia-php/console

This is a generally healthy, actively maintained package with a clear MIT license, tests in both the artifact and repository, regular releases, recent repository activity, and four active contributors backed by an organization-owned project. The 0.x version indicates a less mature stability contract, while low repository popularity, absent security scanning and security policy, and a workflow with top-level write permissions create meaningful transparency and supply-chain hygiene concerns. The missing changelog is mitigated by the presence of GitHub Releases, and the package otherwise appears reasonable to depend on with normal review of its evolving API and CI configuration.

Latest 0.2.9

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

The repository has one pull_request_target workflow, mirror.yml. No untrusted checkout or script injection was detected, but this workflow type warrants review because it can run with elevated repository context.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small package, but provides little evidence of an active user feedback channel.

Repo popularity

The repository has only 2 stars, 1 fork, and 0 watchers. This is weak supporting evidence, but popularity alone does not establish abandonment given the observed activity and organization backing.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; the latter is a hygiene gap for supply-chain transparency.

Security policy

No security policy was found, leaving vulnerability reporting and response expectations undocumented.