decodelabs/hatch

Usable with caveats: the package is clearly licensed, documented, correctly backed by its repository, and has a clean release workflow. However, the latest registry release was about one year ago, recent commit activity is absent, and repository security hygiene is limited.

Latest v0.1.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has six releases over about 18 months, but only one release in the last year and the assessed release is about one year old. This indicates slowing delivery and raises a maintenance concern, though the project is not yet abandoned.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent repository push is a compensating sign, but the current lack of development activity still lowers confidence in ongoing maintenance.

Repo popularity

The repository has no stars or forks and only two watchers, offering little external adoption evidence. Popularity is supporting evidence rather than a requirement, so this is only a modest concern for a small utility.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.