Package Health/helsingborg-stad/attachment-revisions

helsingborg-stad/attachment-revisions

This is a mature, established package with nearly ten years of release history, a stable major version, a recent release, active non-archived organization-backed repository, and no registry deprecation. The main concerns are that repository commit activity has been absent for 3 months, issue and pull-request queues show no recent resolution, the package and repository lack tests and a changelog, and the release workflow does not declare top-level token permissions. These are meaningful maintenance and transparency gaps, but they are moderated by the recent release, matching repository, build and security tooling, clean workflow analysis, and organization ownership; the package appears usable but should be adopted with normal maintenance and update monitoring.

Latest 3.0.13

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

Neither the artifact nor repository contains tests or a changelog, and the artifact lacks a README; the repository does have GitHub Releases, which provides some release transparency but does not compensate for the testing gap.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is concerning for maintenance responsiveness, but it is partly offset by the release published immediately before collection.

Repo issue activity

There is 1 open issue and 8 open pull requests, with no new or closed issues and no merged pull requests in the last month. The unresolved queue is a maintenance warning, though it is not by itself evidence of abandonment.

Repo popularity

The repository has no stars or forks and only 9 watchers, indicating limited external adoption and review. Popularity is supporting evidence rather than decisive, so this lowers confidence and maturity assessment modestly.

Security policy

No SECURITY.md or equivalent security policy was found, reducing vulnerability-reporting transparency for dependents.