goaop/dissect

Clear documentation, tests, licensing, and a dependency-light design make integration straightforward. Organization backing and recent repository activity partly offset the narrow recent contributor base and sparse release history.

Latest 4.0.1

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases over about 943 days, with one release in the last 12 months and a median interval of about 767 days, indicating a slow maintenance cadence.

Repo bus factor

All recent commits came from one contributor, concentrating maintenance responsibility; organization backing provides some handoff capacity but does not remove the concentration risk.

Repo commit activity

There was one commit in the last three months, so the repository shows recent activity but not a strong ongoing maintenance pace.

Security policy

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow audit

Both workflows use read-only permissions and contain no detected injection or high-confidence audit findings, but all seven action references are unpinned, weakening build reproducibility and update safety.