xhyperf/enum-plus

This is a small, clearly licensed Composer package with a matching organization-owned repository, minimal runtime dependencies, no install-time scripts, stable v1.0.2 releases, and no registry deprecation or dangerous workflow findings. However, the repository shows no commits or active maintainers in the last 3 months, the package and repository contain no tests or changelog, the README is only 12 characters long, and no security policy or security scanning is present. The latest release and repository push are recent, which partly offsets the lack of recent commit activity, but the limited transparency and uncertain ongoing maintenance make this usable with caution rather than a strong default dependency.

Latest v1.0.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present and GitHub Releases are used, but the README is only 12 characters long and neither the artifact nor repository contains tests or a changelog. For a small two-source-file library, the absence of tests and documentation is a genuine maintenance and transparency gap.

Repo commit activity

The repository has zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern. The recent release and push provide some compensating evidence, so this indicates caution rather than severe abandonment.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a tiny package with no reported problems, but it also offers little evidence of an active user or maintainer community.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counters provide no external adoption or resilience signal for this dependency.

Repo tooling

Composer is used as the build tool, fitting the package ecosystem, but no security scanning tools are configured. The missing scanning lowers supply-chain transparency somewhat without making the package unfit on its own.