diablomedia/zym-message

The package is feature complete, tested, licensed, and recently released, but maintenance is intentionally infrequent. The workflow audit also found a high-confidence bot-condition issue and all five actions are unpinned.

Latest 1.0.4

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only five releases have been published since December 2021, with a median interval of about 449 days and one release in the last 12 months. This fits a feature-complete package but indicates sparse maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Recent release activity partly offsets this, but the absence of coding activity raises maintenance risk.

Repo popularity

The repository has no stars or forks and only two watchers, indicating a small user base. Popularity is supporting evidence rather than a health verdict, so this has limited weight.

Security policy

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a modest transparency gap for a maintained library.

Workflow audit

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, and all five action references are unpinned. There are no untrusted checkouts or script injections, which limits the risk.