alnutile/inertia-crud

It has clear documentation, tests, a changelog, and a source repository that matches the package. Workflow automation needs care: all nine action references are unpinned, and a high-confidence bot-condition finding affects the Dependabot merge workflow; pin 1.0.0 if adopting.

Latest 1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package uses a post-autoload-dump install lifecycle script. This is not inherently unsafe, but it adds installation behavior that should be understood before depending on the package.

Project backing

The package and repository are owned by the same individual account, with no organization backing shown. That makes the inactive single-maintainer project more exposed to abandonment.

Release history

The package has only three releases, with the latest published over three years ago and no releases in the last 12 months. This is meaningful abandonment risk despite a previously regular median interval of about 35 days.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the last push being over three years ago, this is the clearest evidence that maintenance has stalled.

Security policy

The repository has no security policy. For a package that generates application controllers, tests, and frontend files, this reduces transparency around vulnerability reporting.