bunches/postcode

Clear documentation, tests, licensing, and organizational ownership provide a solid baseline. The main concern is that this remains a one-release project with no recent commit activity, while its two workflow actions are unpinned.

Latest 1.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 16 months ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance, although a small stable library may not need frequent releases.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the single-release history, this weakens evidence of active maintenance.

Repo issue activity

There are no open issues and one open pull request, but no issues or pull requests were merged in the last month. This offers little evidence of current responsiveness.

Repo tooling

The repository uses Composer and Make, showing basic build tooling, but it reports no security scanning tools. That is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a small postcode-formatting library this is a limited concern, but it leaves vulnerability reporting expectations undocumented.