azine/video.js-bundle

The package includes a clear README, tests, matching Apache-2.0 licensing, and no install-time scripts. Workflow actions are unpinned, while the project is new and maintenance is concentrated in one contributor; read-only permissions reduce the workflow exposure.

Latest 2.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository owner match, but the owner is a user account rather than an organization. This supports package identity while providing no organizational maintenance cushion.

Release history

This package is only 18 days old and has one release, so there is not yet enough history to establish long-term maintenance reliability. Its recent publication is not evidence of abandonment.

Repo bus factor

One contributor made 100% of the recent commits, leaving no demonstrated backup maintainer. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset this concentration.

Repo commit activity

There was one commit in the last three months from one active maintainer. That is consistent with a newly published package but provides limited evidence of sustained maintenance capacity.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. For a small asset bundle this is a modest transparency gap rather than a severe risk.