hammerstone/refine-nova

The README, release notes, and matching repository make the package straightforward to evaluate. Its workflows use unpinned actions and the repository has no security policy or scanning tools, adding maintenance and build-integrity concerns.

Latest v0.2.4

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was nearly three years ago, with no releases in the last 12 months, despite a reasonably regular earlier cadence. This is a substantial maintenance concern, though the package is not marked deprecated.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository remains available and was updated alongside the latest release, but current maintenance capacity is unclear.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. This weakens ongoing supply-chain and dependency oversight without showing an immediate failure.

Security policy

No security policy was found in the linked repository, reducing transparency around vulnerability reporting and maintenance expectations. This is a process gap rather than evidence of an unsafe release.

Version stability

Version v0.2.4 is not a stable major release, which suggests a less mature compatibility commitment. It is not labeled a prerelease, providing some compensation.