bdk/css-xpath

The package has a clear README, tests in its repository, a recent release, and lightweight dependencies. Maintenance activity is currently absent, and the workflow contains an always-true condition, an archived action, and four unpinned action references.

Latest v1.0.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer reflects a genuinely thin backing structure.

Release history

The package is mature at 3151 days old and released once in the last 12 months, but only three releases overall with a median interval of about 3.9 years indicate a slow maintenance cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The recent release and repository push help, but they do not show ongoing development capacity.

Security policy

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although the package is small and has security scanning enabled.

Workflow audit

The sole workflow was fully analyzed with no untrusted checkout or script injection, but it has a high-confidence always-true condition, a high-confidence archived action, and all four action references are unpinned. These are meaningful maintenance and build-integrity hygiene concerns.