wyrihaximus/metrics

The project has clear licensing, repository tests, and release notes for this version. Maintenance is currently quiet, while install hooks and broad, unpinned workflow permissions add avoidable adoption risk.

Latest 3.0.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

post-install-cmd and post-update-cmd run code during dependency installation or updates, creating avoidable supply-chain and reproducibility exposure for consumers.

Project backing

The repository is owned by an individual rather than an organization, so the single registry maintainer represents a genuinely thin ownership base rather than normal organization publishing hygiene.

Release history

The package has seven releases since November 2020, but no release in the last 12 months. That is a meaningful maintenance concern, partly offset by the repository having been pushed recently.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent repository push and pull-request activity provide some compensation, but the short-term commit gap still lowers confidence.

Repo tooling

The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.