zoon/php-bounce-handler

This is a generally usable and transparently packaged dependency with a long history since 2021, a stable non-prerelease version, recent releases, an active non-archived repository, tests and fixtures, a license file, and no install-time lifecycle scripts. The main concerns are that repository commit activity shows no commits and no active maintainers in the last 3 months, while the project has no security scanning or security policy and very limited popularity; these lower confidence in ongoing maintenance and security hygiene but do not by themselves make the release unfit to depend on.

Latest 8.0.3

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits and no active maintainers were observed during the last 3 months. This is a meaningful maintenance concern, although the recent release and repository push provide some compensating evidence.

Repo popularity

The repository has only 4 stars, 2 forks, and 3 watchers, indicating a small user and contributor footprint. Popularity is supporting evidence rather than a verdict, so this modestly limits external validation without making the package unsafe to adopt.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a security-hygiene gap, while the build tooling supports ordinary project maintenance.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations for a package that parses untrusted email content.