Package Health/enjin-forks/graphql-formatter

enjin-forks/graphql-formatter

Clear documentation, tests, licensing, and organization backing make the package straightforward to evaluate and adopt. Its workflow is auditable but relies on unpinned actions, and the small release history leaves limited evidence of long-term support.

Latest v0.1.6

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is about 6 months old but has only one release, so there is little evidence of an established release cadence or sustained maintenance.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, a meaningful warning about current maintenance capacity despite the recent initial release.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, though it is not by itself evidence that the package is unsafe.

Version stability

v0.1.6 is not a stable-major release, which signals an early-stage API and greater compatibility risk for dependents.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it scopes permissions at job level. However, all 4 action references are unpinned, leaving avoidable maintenance and supply-chain hygiene risk.