abmmhasan/intermix

Usable with caveats: the package is actively released and backed by a repository with strong testing and security hygiene, but Packagist marks this package deprecated. Recent work is concentrated entirely in one contributor, increasing continuity risk despite organization backing.

Latest 10.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package deprecated at package scope, with no clear deprecation message; this is a significant adoption and continuity concern even though the listed replacement is the same package.

Repo bus factor

One contributor made 100% of the 390 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is evidenced, so bus-factor risk remains.

Repo commit activity

There were 390 commits in the last 3 months, showing exceptionally active development, but all activity came from one maintainer, leaving continuity dependent on that person.

Repo popularity

The repository has 13 stars and no forks, providing limited external adoption evidence; popularity is supporting evidence only and does not outweigh the strong release and activity signals.

Token permissions

Both workflows lack top-level permissions declarations and rely on job-level permissions, which is less explicit than a repository-wide least-privilege default.