Package Health/automattic/sliding-window-counter

automattic/sliding-window-counter

The source repository is backed by Automattic, includes tests and security scanning, and published release notes document this version. Maintenance has slowed, with no commits in the last 3 months, while a high-confidence workflow audit found an unpinned container image.

Latest 0.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last 3 months, indicating a recent maintenance lull; the recent 0.6 release and organizational backing partly offset abandonment concerns.

Repo popularity

The repository has only 3 stars and 3 forks, showing limited community adoption; this is supporting evidence rather than a decisive health problem.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear despite its use of security scanning tools.

Version stability

Version 0.6 is a non-prerelease release, though it remains before a stable major version and may carry more API-change risk than a 1.x release.

Workflow audit

All four workflows were analyzed with no untrusted checkouts or script injection, but a high-confidence finding reports an unpinned container image and 9 of 13 action references are unpinned, weakening build reproducibility.