altis/local-chassis

The package includes clear usage documentation, release notes, and no install-time scripts. Organization ownership and a non-archived repository provide some continuity, but its development tooling has unresolved high-confidence workflow findings.

Latest 15.0.0

Packagist

45%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 63 releases and a historically regular cadence, but its latest release was in April 2023 and it had no releases in the last 12 months. This long period without a release materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release gap and suggesting maintenance has stopped.

Repo issue activity

There were no new or closed issues or pull requests in the last month, leaving three open issues without evidence of active follow-up.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that configures local development environments.

Workflow audit

Both workflows contain high-confidence template-injection findings, and all five action references are unpinned; the audit also found a high-confidence ad hoc package installation. No untrusted checkout or script-injection trigger was detected, so this is a significant hygiene concern rather than a standalone critical verdict.