Package Health

hershel-theodore-layton/sgml-stream-exam

The package includes repository tests, release notes, and a matching MIT license. Its only maintainer has made 36 commits, but the project is brand new and its workflow leaves container images unpinned.

Latest v0.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the sole release and the package is 0 days old, so there is not yet evidence of sustained release maintenance.

Repo bus factorcaution

All 36 recent commits come from one contributor, leaving maintenance dependent on a single person.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Version stabilitycaution

Version v0.0.0 signals an early, unestablished release line rather than a mature stable version.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection findings, but both container-image findings are low-confidence and the two image references are unpinned, leaving a minor build-reproducibility concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
hershel-theodore-layton/sgml-stream-interfaces
Version ^2

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform