Package Health/helsingborg-stad/modularity-timeline

helsingborg-stad/modularity-timeline

This is a mature, actively released package with a stable major version, a non-deprecated registry entry, organizational backing, a matching repository, and a recent release. The main concerns are that the repository recorded no commits or active maintainers in the last 3 months, the artifact lacks a README and tests while the repository also lacks tests, and the repository has no security policy with incomplete top-level workflow permission declarations. Overall, it appears usable and maintained enough to depend on, but the thin recent development activity and project-hygiene gaps warrant normal dependency monitoring.

Latest 5.0.6

Packagist

74%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact lacks a README, tests, and changelog, and the repository also lacks tests and a changelog. GitHub Releases provide some release communication, but the absence of repository tests and ordinary documentation remains a genuine maintainability and transparency gap.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This indicates a recent development lull and lowers confidence in ongoing maintenance, although the current release and recent push provide partial compensating evidence.

Security policy

No SECURITY.md or equivalent security policy was found. This is a transparency and vulnerability-reporting gap for a package intended to be consumed as a dependency.

Token permissions

The release workflow has no top-level permissions declaration, though it has job-level permissions and no top-level write permissions. Explicit least-privilege configuration would be preferable, so this is a moderate workflow-hygiene concern rather than a severe risk.