glueful/aegis

Aegis v1.16.0 appears healthy and reasonably mature for adoption: it has a stable release, 27 releases over about 358 days with 26 in the last 12 months, recent repository activity, substantial tests and documentation, a matching source repository, and no deprecation or install-time lifecycle scripts. The main concerns are that all 29 commits in the last 3 months came from one contributor, the repository has minimal observed popularity, and no security policy or security-scanning tooling is present; these are meaningful transparency and resilience gaps but are partly offset by organization ownership, ongoing releases, and strong package scaffolding.

Latest v1.16.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 29 commits in the last 3 months, creating a real continuity and bus-factor concern. Organization ownership provides some potential handoff capacity, but no second active contributor is evidenced.

Repo popularity

The repository has only 1 star, 0 forks, and 0 watchers, providing little external adoption evidence; this is a supporting caution rather than a decisive health issue.

Repo tooling

Composer build tooling is present, but no security-scanning tools are detected; for an RBAC package, the missing security automation is a meaningful hygiene gap.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and disclosure procedures undocumented.