datlechin/flarum-chatgpt

The project has no security policy and no recent active contributors, while its single maintainer limits visible continuity. Licensing, installation documentation, release notes, and repository ownership are otherwise clear, but the long release gap warrants pinning this version.

Latest v0.5.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in the last 12 months, and its latest release was nearly two years after the assessment date, despite a moderate historical median interval of about 55 days. This is a meaningful maintenance concern for a dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months, indicating no recent development activity. The repository is not archived, but that does not offset the current inactivity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 2 issues and 5 pull requests remain open. This supports a picture of limited recent project movement.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less severe than abandonment or deprecation.

Workflow audit

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but its one action use is unpinned and the workflow has no top-level permissions block. These are modest reproducibility and least-privilege gaps, not severe risks on their own.