Package Health/goldnead/statamic-identity-contracts

goldnead/statamic-identity-contracts

This is a healthy but very young package with strong transparency and active development signals. It has a stable v1 release, four releases over 43 days, a non-deprecated registry entry, a matching repository, documented licensing, a changelog, repository tests, security policy, read-only CI permissions, and 19 recent commits from two active contributors. The main reservations are its short history, zero observed popularity, a single registry publisher, and the absence of automated security-scanning tools; these warrant monitoring but do not currently indicate abandonment or an unfit dependency.

Latest v1.2.1

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one account has registry publish access, creating some publishing continuity risk. This is partly offset by repository activity from two contributors, but the registry publisher base remains narrow.

Project backing

The repository is owned by a user account rather than an organization, so there is no organization-level maintenance handoff to offset the concentrated contributor base.

Release history

Four releases in 43 days, with a median interval of about 12 days, show active early development. The short package age means long-term maintenance is not yet established.

Repo bus factor

Two contributors are active, with the top contributor responsible for about 68% of recent commits. The secondary contributor's 32% share provides meaningful compensation, but ownership is still concentrated.

Repo popularity

The repository has zero stars, forks, and watchers. This is a maturity and external-validation gap, but popularity is supporting evidence rather than a standalone health verdict, especially for a young foundational package.