webservco/file

This is a generally usable and well-scaffolded stable PHP library: it has an MIT license, README, tests, changelog, a matching repository, no deprecation, no install-time lifecycle scripts, and a consistent release history over more than two years. However, the repository shows no commits or active maintainers in the last 3 months, has no security policy or security-scanning tooling, and has negligible community activity; these factors create a meaningful maintenance and transparency concern despite organization backing and a recent release.

Latest v1.5.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a resilience concern, but the linked repository is owned by an organization, partially compensating for the thin registry maintainer base.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers during the last 3 months, which is a meaningful maintenance slowdown risk even though the release and push timestamps are recent.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. The clean tracker is favorable, but the absence of engagement limits evidence of active community maintenance.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. This is not a verdict for a small library, but it provides little independent evidence of broad adoption or community support.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured, leaving a security hygiene gap that is not compensated by the other repository signals.