Package Health

atelier/diagram

The package includes a README, changelog, release notes, tests in the repository, and a security policy. Its only notable concerns are that all six recent commits came from one contributor and all three workflow actions are unpinned.

Latest v0.8.0PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package is young at 43 days with two releases spaced about 43 days apart, so its maintenance record is still limited rather than established.

Repo bus factorcaution

One contributor made all six commits in the last three months, leaving maintenance dependent on a single active contributor.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest tooling gap.

Version stabilitycaution

v0.8.0 is not a stable major release, but it is not marked as a prerelease and recent releases show no prerelease churn.

Workflow auditcaution

The workflow audit analyzed all one workflow with no failed files, read-only permissions, and no dangerous findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon André

Direct Dependencies

DependencyLast ReleaseScore
atelier/svg
Version ^1.0
—
—
atelier/layout
Version ^0.8
—
—

Weekly Downloads

Info

Last Published
5 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform