Package Health/bmd/responsive-grid-extension

bmd/responsive-grid-extension

This is a usable but young package with a coherent linked repository, ten releases over 139 days, a recent push, a non-deprecated status, an explicit GPL-2.0-or-later license, and repository tests despite tests not being packaged. Its main risks are the very small maintenance base, only one commit in the last three months, no security policy or automated security scanning, and workflows that omit top-level token permissions. The package appears actively published rather than abandoned, but dependence carries meaningful maintainer-continuity and project-security-process risk.

Latest 0.2.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry maintainer, Bob Moore, is listed. This is a genuine continuity concern because the repository is user-owned rather than organization-backed.

Project backing

The repository owner is a GitHub User rather than an organization, so there is no evidence of institutional backing to mitigate the single-maintainer risk.

Repo bus factor

All one recent commit came from a single contributor, giving the project a bus factor of one with no organizational backing shown by project_backing.

Repo commit activity

Only one commit from one active maintainer was recorded in the last three months. The recent push and frequent release history compensate for abandonment risk only partly, leaving a maintenance-activity concern.

Repo issue activity

There are no open issues or pull requests and no issue or merge activity in the last month. With no reported backlog this is not severe, but it provides little evidence of an active user or maintainer feedback loop.