Package Health

gosuperscript/schema

Frequent releases, recent commits, tests, and a security policy indicate an actively maintained project. Pinning is incomplete in its single workflow, and the pre-1.0 version signals a still-changing API.

Latest v0.6.16PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the source-to-package relationship is unclear. Organization backing and active repository work reduce abandonment concerns but do not resolve the identity gap.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. This provides little external adoption evidence, but popularity is supporting evidence and does not outweigh the observed maintenance activity.

Version stabilitycaution

Version v0.6.16 is not a stable major release, so API compatibility may still change. It is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. All 4 action references are unpinned, however, leaving workflow dependencies exposed to moving upstream code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
webmozart/assert
Version ^1.11
—
—
illuminate/support
Version ^11.0 || ^12.0 || ^13.0
—
—
sebastian/exporter
Version ^6.0 || ^7.0
—
—
gosuperscript/monads
Version ^1.0.0
—
—
php-standard-library/php-standard-library
Version ^3.2 || ^4.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform