Package Health/bobdenotter/google-analytics-widget

bobdenotter/google-analytics-widget

The repository has no security policy, and it neither matches the package name nor mentions it in its README. The MIT license, stable version, and absence of install scripts provide some transparency, but they do not offset the long maintenance gap.

Latest 1.0.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in October 2020, with no releases in the last 12 months and only three releases over about seven years. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no observed current maintenance.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the linkage is not transparently established. This is a meaningful provenance concern even though name differences can occur in subpackages.

Repo popularity

The repository has zero stars, two forks, and one watcher. Popularity is only supporting evidence, but these low figures provide little external evidence of active use or review.

Security policy

The linked repository has no security policy. For a package integrating with Google Analytics credentials and APIs, this weakens vulnerability-reporting transparency.