xp-forge/mongo-sessions

Usable with caveats: the package is clearly backed by a matching organization repository, has tests, release notes, and no deprecation or dangerous workflow findings. Maintenance is currently quiet, with no commits from any active maintainer in the past three months, and repository security hygiene is limited.

Latest v4.0.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 4 years, with 15 releases and a release as recently as January 4, 2026. However, only one release occurred in the last 12 months, indicating a slower cadence rather than active ongoing development.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months. The recent release and repository push provide some counterweight, but this is the clearest current maintenance concern.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little independent evidence of community adoption. Low popularity is supporting evidence rather than a standalone indication that the package is unsafe to use.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small PHP library this is a hygiene gap, though it is not by itself evidence of abandonment.

Security policy

The repository has no security policy. This limits transparency about vulnerability reporting, although the package is a focused library and other repository evidence is present.