elie29/oci-driver

The project has clear documentation, tests in the repository, a license, and a recent release. Maintenance capacity is less reassuring because no commits or active maintainers were recorded in the last three months, while the workflow uses four unpinned actions and has no security policy or scanning.

Latest v2.0.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits or active maintainers were recorded in the last three months. This weakens evidence of ongoing maintenance, although the package also published a release during the assessment period.

Repo popularity

The repository has zero stars, one fork, and one watcher. This is weak supporting evidence, but popularity alone does not determine the health of a small package.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance coverage less transparent.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe.

Workflow audit

The single workflow was fully analyzed with no injection or high-severity findings, but all four action references are unpinned. The lack of a top-level permissions block is acceptable on its own and no write-wide token was observed.