gemorroj/rss

The package has a small, focused footprint and recent source activity, with clear licensing and tests. Its workflow audit found no risky patterns, though its action references are unpinned.

Latest 2.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry package and repository are owned by the same individual account, so there is no organization backing shown to offset the concentrated maintainer base.

Release history

The package has existed for about 9 years but only has 7 releases, with one release in the last 12 months and a median interval of about 16 months. This is a meaningful maintenance-cadence caution despite the recent release.

Repo bus factor

All recent commits came from one contributor, giving the project a top-contributor share of 100%. This concentrates maintenance risk, especially alongside the sparse release history.

Repo commit activity

There was one commit in the last 3 months from one active maintainer, showing recent attention but limited ongoing activity.

Repo tooling

The project uses Composer, but no security-scanning tools were detected. The absence of scanning is a modest transparency and hygiene gap, not evidence of abandonment.