Package Health/bluspark/dgfip-datamatrix

bluspark/dgfip-datamatrix

This release appears usable and reasonably transparent: it is not deprecated or archived, has an organization-backed repository, includes a license, README, tests, a compact file tree, CI, and no runtime dependencies or install-time scripts. However, maintenance is relatively sparse, with only three releases across roughly 877 days, one release in the last 12 months, and no commits or active maintainers in the last three months. The repository is also very small, has minimal adoption evidence, lacks security scanning and a security policy, and its workflow does not declare top-level token permissions. These concerns place it in the caution range rather than making it unfit to depend on.

Latest v0.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases over about 877 days, with one release in the last 12 months and a median interval of about 439 days; this suggests slow maintenance, although the latest release is recent.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite the recent release or push.

Repo popularity

The repository has only 1 star, 0 forks, and 2 watchers, providing little independent evidence of broad adoption; this is supporting caution rather than a verdict by itself.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-process gap.

Security policy

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.