utopia-php/reputation

This is a well-scaffolded, licensed package with tests, a changelog, a small dependency surface, no install-time lifecycle scripts, and a clearly matching organization-owned repository. However, version 0.1.0 was released today and is the package's only release, while the repository shows no commits or active maintainers in the last 3 months; this makes long-term maintenance and maturity unproven. The repository also lacks security scanning and a security policy, and its mirror workflow uses pull_request_target with top-level write permissions, which warrants supply-chain hygiene caution. It is usable, but should be adopted with normal review and monitoring until a longer maintenance history is established.

Latest 0.1.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
maxmind-db/reader Version ^1.12	—	—