vendimia/form

Usable with caveats: it is actively published, clearly backed by an organization, and has a small dependency footprint. However, the repository shows no recent commit activity, has no tests or changelog, and provides no security policy.

Latest 0.1.25

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present, but the artifact and repository contain no tests or changelog. GitHub Releases provide some release transparency, but the missing tests still reduce confidence in maintenance quality.

Repo commit activity

There were no commits and no active maintainers during the last 3 months. Although the package has a recent release and repository push, the absent commit activity is a concrete maintenance concern.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is neutral for a small library but provides little evidence of an active user or maintainer community.

Repo popularity

The repository has no stars or forks and only one watcher, so there is little community visibility or external adoption evidence. Low popularity is supporting caution rather than a standalone health verdict.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The lack of scanning reduces repository hygiene confidence, though it is not evidence of a health failure by itself.