player.style

MIT licensing, bundled typings, provenance, and an organization-backed repository improve adoption confidence. The lack of commits in the last three months and unpinned workflow actions warrant continued maintenance scrutiny.

Latest 0.3.4

NPM

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

100

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance slowdown despite the recent release history.

Repo issue activity

There are no open issues and two open pull requests; recent issue and pull-request merges are absent, so this offers limited evidence of current responsiveness.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance less transparent for adopters.

Version stability

Version 0.3.4 is a regular, non-prerelease release, although the package remains below a stable major version.

Workflow audit

All 11 analyzed action references are unpinned, which weakens build reproducibility. The auditor also reported a low-confidence cache-poisoning finding; because it is low confidence and cache behavior alone is hygiene, it does not independently indicate severe risk.