adnanmula/tournament

The package includes tests, a license, and only one runtime dependency, which keeps adoption straightforward. Its post-install script, missing security policy, and unpinned workflow action add modest operational risk.

Latest 0.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months, while the latest repository push was over 16 months ago. This is the strongest evidence of stalled maintenance.

Lifecycle scripts

A post-install command runs during installation, adding execution behavior and some supply-chain exposure beyond ordinary dependency resolution.

Maintainers

A single registry maintainer creates a thin publishing base. The matching personal repository provides some continuity, but there is no broader maintainer redundancy shown.

Release history

This is the only release, published about 16 months ago, with no releases in the last 12 months. That leaves limited evidence of ongoing maintenance.

Repo tooling

The project uses Make and Composer, but no security-scanning tools were detected. That is a transparency and hygiene gap, not evidence of an unsafe release by itself.