ditogit/ci4-agent

This release has solid basic packaging hygiene: it is MIT-licensed, includes a README, tests, a complete-looking source tree, no install lifecycle scripts, a stable non-prerelease version, and is not deprecated or archived. However, it is exceptionally new, with all six releases published within about 51 minutes, no observed commits or active maintainers in the last three months, no repository security policy, no security scanning, and no meaningful popularity or issue history. The repository does reference the package in its README, which partly offsets the name mismatch, but the evidence is still too limited to establish durable maintenance or project maturity; adoption is reasonable only with heightened review and monitoring.

Latest v1.0.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance history.

Release history

The package is brand new: its six releases occurred within about 51 minutes and its package age is 0 days. This provides almost no historical evidence of maintenance quality or release discipline.

Repo commit activity

The repository reports zero commits and zero active maintainers over the last three months. Given the package's same-day creation this may reflect its age, but it still leaves maintenance capacity and continuity unproven.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently negative for a new package, but it provides no evidence of an active user or maintainer feedback loop.

Repo popularity

The repository has zero stars, forks, and watchers. For a package released today this is understandable, but it leaves popularity-based validation unavailable.