zayro/phptools

The package includes a license, tests, and a readable README, but its install hook adds operational complexity. Its single-user project has no security policy or automated security scanning, increasing maintenance and transparency concerns.

Latest v2.3

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about six years ago, with no releases in the last 12 months. Twenty historical releases show earlier activity but do not offset the prolonged release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in 2020. This is strong evidence of abandonment risk.

Lifecycle scripts

The package runs a post-install command, so installation performs additional publisher-defined work. That adds dependency-installation complexity and deserves more scrutiny than a package without install hooks.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these figures provide little external evidence of active adoption or review.

Repo tooling

Composer is used for builds, but no security-scanning tools are configured. The missing scanning is a modest hygiene gap, not evidence of maliciousness.