done-super-app/cereal

The package has clear documentation, tests, and an MIT license, but it has had no new release or repository commits for about 20 months. All six workflow actions are unpinned, and the repository has no security policy, which adds maintenance and build-hygiene concerns.

Latest v1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a thin publishing base. The linked repository is organization-owned, providing some backing that offsets this concern.

Release history

This is the only release, published about 20 months ago, with no releases in the last 12 months. That is a meaningful sign of limited ongoing maintenance for a library.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent development evidence.

Security policy

The repository has no security policy. This does not prove a security problem, but it reduces transparency about how maintainers handle vulnerabilities.

Workflow audit

Both workflows were analyzed without detected dangerous triggers or audit findings, but all six action references are unpinned. That leaves the build exposed to changing action contents and is a notable hygiene weakness.