Package Health

gianlucagiacometti/bootstrap-select

Healthy and actively maintained, with clear licensing and frequent releases. The main concerns are that one person made all recent commits and the repository lacks tests, a security policy, and uses write-enabled workflow permissions.

Latest v5.3.11PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Maintainerscaution

Only one registry account has publishing access. This is a real continuity concern, although the repository's recent activity shows that the maintainer is actively publishing and contributing.

Package scaffoldingcaution

A substantial README and changelog are present, and the repository uses GitHub Releases, which supports transparency. Tests are absent from both the package and repository, leaving validation coverage unclear.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no organizational maintenance buffer to offset the concentrated contributor base.

Repo bus factorcaution

All 148 recent commits came from one contributor, so maintenance depends heavily on a single person. The high recent activity compensates for abandonment concerns only partially.

Repo popularitycaution

The repository has only 4 stars, 1 fork, and 1 watcher. This provides little external validation, but popularity is supporting evidence rather than a requirement for a small, active package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gianluca Giacometti

Direct Dependencies

DependencyLast ReleaseScore
twbs/bootstrap
Version ^5.3
twbs/bootstrap-icons
Version ^1

Weekly Downloads

Info

Last Published
11 days ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform