answear/wide-eyes-bundle

The package has clear MIT licensing, useful documentation, tests, and a repository that matches its name. Its workflows have no detected dangerous findings, but all six action references are unpinned and install-time scripts increase operational exposure.

Latest 3.0.0

Packagist

12%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency and is not limited to this release.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This indicates no current maintenance capacity, reinforcing the archived and abandoned status.

Repository archived

The linked source repository is archived, despite being pushed on February 26, 2025. An archived repository is a strong abandonment risk for a package that requires ongoing compatibility maintenance.

Lifecycle scripts

Composer install and update lifecycle scripts are present. They add execution during dependency operations and therefore modestly increase operational exposure, although this signal alone is not evidence of unsafe behavior.

Release history

The package has had nine releases since December 2020, but no releases in the last 12 months and its latest release was October 3, 2024. This supports the abandonment concern, though the package previously had a moderate release cadence.