Package Health/deadsimple/hyva-alpine-confetti

deadsimple/hyva-alpine-confetti

Usable with caveats: this is a clearly licensed, small package with a matching source repository, documented usage, and no deprecation or install-time scripts. It is brand new, has no demonstrated commit history yet, and lacks a security policy, so longer-term maintenance is still unproven.

Latest 1.0.2

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is extremely new: it has only two releases, both published within hours, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activity

There have been no commits or active maintainers in the last three months. Because the repository was only created very recently, this is mainly an unproven-maintenance concern rather than evidence of abandonment.

Repo tooling

The repository uses Composer for builds, but no security scanning tool was detected. For a new package this is a transparency and maintenance gap, though it is not by itself severe.

Security policy

No security policy was found in the repository. That weakens vulnerability-reporting transparency, especially for a package intended for integration into a storefront.