gaomingcode/bootstrap

The package includes a license, documentation, security policy, and no install-time scripts. Its repository has security tooling and an auditable workflow set, but the published artifact is a thin, inactive fork-like project with no recent contribution activity.

Latest 5.0.1

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

This package has only one release, 5 years ago, with no releases in the last 12 months. That is strong evidence of an unmaintained dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the long-standing lack of release activity.

Project backing

The package and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the thin maintenance record.

Repo popularity

The linked repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no compensating sign of an active project.

Workflow audit

All 9 workflows were analyzed with no untrusted checkouts, script injection, or audit findings. However, all 26 action references are unpinned, a reproducibility and workflow-hygiene weakness.