bojaghi/vite-scripts

This is a reasonably structured and licensed package with a stable 1.2.2 release, recent registry publication, an active (non-archived) matching organization-owned repository, tests, a changelog, and no install-time lifecycle scripts. The main concern is maintenance evidence: the repository reports zero commits and zero active maintainers in the last 3 months, while the project has no security scanning or security policy and has negligible popularity. It appears usable and transparent enough to depend on with normal project-level review, but its limited recent development activity warrants monitoring.

Latest 1.2.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository reports 0 commits and 0 active maintainers during the last 3 months. Although a recent release and repository push show some publication activity, the short-term development signal is weak and raises maintenance-continuity concerns.

Repo popularity

The repository has 0 stars and 0 forks with 1 watcher. Popularity is supporting evidence rather than a verdict, but these values provide little external evidence of adoption or community support.

Repo tooling

Composer build tooling is present, but no security-scanning tools are detected. The missing scanning coverage is a genuine transparency and supply-chain hygiene gap, though it is not evidence of maliciousness by itself.

Security policy

No repository security policy was found, leaving disclosure and vulnerability-handling expectations undocumented.