zephyrphp/starter

Release historycaution

The package is 250 days old with 42 releases in the last 12 months, released about every 40 minutes at the median. This shows active publishing but unusually rapid churn for a young project, which reduces maturity confidence.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any community footprint provides no external maturity signal for this young project.

Repo toolingcaution

Composer is used as the build tool, which fits the PHP package, but no security scanning tools are configured. The missing scanning reduces supply-chain hygiene confidence without proving a defect.

Security policycaution

The repository has no security policy. For a CMS starter with authentication, authorization, APIs, and multiple runtime dependencies, this is a meaningful transparency and maintenance gap.

Version stabilitycaution

Version v0.5.23 is not a stable-major release, although it is not marked as a prerelease and recent releases are consistently non-prerelease. The pre-1.0 status leaves greater room for breaking changes.