zeero-fw/app-start

The MIT license and included README make the package easier to evaluate, while Composer packaging is straightforward. Missing security scanning and a security policy leave limited evidence of ongoing maintenance discipline.

Latest 1.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both from February 2023, and none in the last 12 months despite being about 3.6 years old. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows compensating maintenance activity.

Maintainers

Only one registry maintainer is listed, leaving little observable publishing capacity if that person becomes unavailable. The repository is user-owned rather than organization-backed, so there is no provided organizational compensation.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or external oversight. Popularity is supporting evidence, but this reinforces the maintenance concerns.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. The build setup is a positive, while the absent scanning reduces confidence in ongoing project hygiene.