andrey-helldar/support

The MIT license, consumer README, source tests, and release notes provide useful transparency. Maintenance is currently quiet, and the registry marks this package abandoned, so pinning it creates avoidable migration risk.

Latest 6.17.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and identifies dragon-code/support as the replacement. This is a major adoption and continuity concern even though the source repository remains available.

Release history

The project has a long history with 188 releases, but only 2 releases in the last 12 months, indicating substantially slower recent activity.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, which weakens the evidence of ongoing maintenance despite the recent repository push and release history.

Security policy

No repository security policy is present. This is a transparency gap, although the package is a general helper library and other tooling provides limited compensation.

Workflow audit

All five workflows were analyzed with no audit findings or untrusted-trigger sinks, but all 9 action references are unpinned and two workflows grant top-level write permissions. This is a workflow hygiene concern, not a severe dependency-health risk on its own.