aisdk/zai

Its short history and single active contributor leave limited evidence of long-term continuity. Tests, a security policy, read-only workflow permissions, and no install scripts reduce practical adoption risk.

Latest v0.8.1

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 61 days old with two releases, both clustered on the first day, so long-term maintenance consistency is not yet demonstrated.

Repo bus factor

All recent commits come from one contributor, creating a continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

Only two commits from one active maintainer were recorded in the last three months, limiting evidence of sustained maintenance.

Version stability

Version v0.8.1 is a non-prerelease release, but the package has not reached a stable major version, so its API may still change.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no injection or other audit findings. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene concern.