goldnead/statamic-toc

This release appears healthy and suitable to depend on: it has been maintained since 2021, has 7 releases in the last 12 months, is on a stable major version, is not deprecated, and the linked repository is active and unarchived with 52 commits from two active contributors in the last three months. The package includes a substantial README, changelog, license file, focused runtime dependency set, and no install-time lifecycle scripts; repository tests compensate for tests not being included in the artifact. The main reservations are low repository popularity, no declared security policy or security-scanning tooling, and limited recent issue activity, but these do not outweigh the strong release and maintenance evidence.

Latest v2.3.0

Packagist

86%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so formal organizational maintenance handoff cannot be assumed. Nevertheless, two contributors are demonstrably active in the recent commit history.

Repo popularity

The repository has only 2 stars, 8 forks, and 1 watcher, indicating limited adoption or community visibility. Popularity is supporting evidence rather than a decisive health criterion, so this is a modest concern.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap, though it is not evidence of abandonment and is partly mitigated by the repository's other CI and workflow controls.

Security policy

The repository has no SECURITY.md or other detected security policy, which reduces vulnerability-reporting transparency for dependents.