bluetree-service/data

The project has clear documentation, tests, release notes, and build tooling that support practical use. Its 0.x status, one-person registry publishing, absent security policy, and inactive recent commits leave meaningful support and maintenance uncertainty.

Latest 0.5.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent push and registry releases partly offset this, but the lack of current development activity raises maintenance risk.

Security policy

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though security scanning is present as a partial compensating measure.

Version stability

Version 0.5.1.0 is not a stable-major release, so compatibility expectations are less certain, although it is not marked as a prerelease and recent releases contain no prerelease versions.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all five action references are unpinned and the workflow grants top-level write permissions. These are workflow hygiene weaknesses without an observed dangerous sink.