catchyui/catchy

The release is licensed, documented, and backed by recent repository work. Its small contributor base is partly offset by organization ownership; inspect the release workflow before adopting it.

Latest v1.5.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package is young at 59 days and has 36 releases, all within the last 12 months. The unusually compressed release history limits evidence of long-term stability, despite strong recent activity.

Repo bus factor

One contributor made about 91% of recent commits, creating concentration risk. Organization ownership and a second active contributor partly compensate for the handoff risk.

Repo popularity

The repository has no stars and one fork. This offers little adoption evidence, but popularity is supporting evidence and does not outweigh the observed maintenance activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap rather than a severe maintenance concern.

Workflow audit

Both workflows were analyzed successfully, but all six action references are unpinned and the release workflow has two high-confidence template-injection findings. No untrusted checkout or script-injection trigger was detected, so this is a workflow hygiene concern rather than a standalone severe risk.