escolalms/tags

Tests, release notes, and an MIT license make integration more transparent. Maintenance has slowed substantially, and every workflow reference is unpinned; the organization backing helps offset the risk.

Latest 0.1.22

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 23 releases but none in the last 12 months, with the latest registry release more than two years ago. Earlier regular releases show prior maintenance, but the current gap lowers confidence in ongoing support.

Repo commit activity

There were no commits or active maintainers in the last three months. The repository's later push history partly offsets this, but the recent inactivity still raises maintenance risk.

Security policy

The repository has no published security policy. This is a transparency and reporting gap, though it is not by itself evidence that the package is unsafe.

Version stability

Version 0.1.22 is not a prerelease, but the package remains below a stable major version. That is a modest maturity concern rather than a severe adoption blocker.

Workflow audit

All four workflows were analyzed without high- or medium-confidence findings, and no untrusted checkout or script injection was detected. However, all 10 action references are unpinned, leaving avoidable build reproducibility and update risk.