web3p3/web3.php

The package has a clear MIT license, tests, documentation, and a matching source repository. Its small dependency base and clean workflow audit help, but the project shows little evidence of current maintenance or security oversight.

Latest 0.1.8

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so there is no provided evidence of institutional backing. This is relevant context but not independently decisive.

Release history

The package has had only two releases, with none in the last 12 months; its latest release was over three years ago. This is strong evidence of stagnation for a library that integrates with a changing blockchain ecosystem.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity. This materially raises abandonment risk.

Repo popularity

The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the maintenance concerns.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance weakness, not evidence of malicious behavior.