vhx/vhx-php

Clear licensing, tests, documentation, and organization backing make the package straightforward to evaluate and integrate. Maintenance evidence is old, with no release activity for about nine years and no commits for about six years, so future compatibility is uncertain.

Latest 1.12.0

Packagist

54%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 20 releases and a regular historical cadence, but its latest release was about nine years ago and there were no releases in the last 12 months. The long period without a release materially raises abandonment and compatibility concerns.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This is the strongest evidence that maintenance has largely stopped.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with two open issues and one open pull request. This supports the conclusion that current project activity is limited.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency gap, while the build tooling provides basic project structure.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the project's stale maintenance.