atelier/barcode

The repository has tests, release notes, strong documentation, and an active organization behind it. Its only release and single-contributor history leave long-term maturity less proven, while the workflow has three unpinned action references.

Latest v0.7.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a young package, only 48 days old with one release, so its maintenance record is not yet established. Recent repository activity partly offsets the short history, but cannot demonstrate long-term continuity.

Repo bus factor

All six recent commits came from one contributor, so the project has a narrow observed maintenance base. Organization ownership provides some ability to hand maintenance off, partly compensating for that concentration.

Version stability

Version v0.7.0 is not a stable major release, which signals an API that may still change. It is not marked as a prerelease, so this is a modest maturity concern rather than a severe warning.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts, injection findings, or audit findings. All three action references are unpinned, which is a supply-chain hygiene gap but not a severe risk by itself.