Package Health

hirale/openmage-ga4-measurement

This release appears healthy and reasonably safe to depend on: it has a clear license, a substantial README, comprehensive repository and artifact tests, frequent recent releases, stable versioning, active recent commits, and no deprecation or archival indicators. The main risks are operational rather than signs of abandonment: all 22 commits in the last 3 months came from one contributor, the repository has no security scanning or security policy, and its modest popularity provides limited external validation. Overall, the strong release and testing activity outweighs these transparency and bus-factor concerns.

Latest v4.1.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publishing access. This is a modest continuity concern because there is no organization backing shown, although the active repository and release history provide compensating evidence.

Project backingcaution

The repository owner is an individual user rather than an organization, so there is no shown organizational maintenance pool to offset the concentrated contributor and single registry maintainer base.

Repo bus factorcaution

All 22 recent commits came from one contributor, with a 100% top-contributor share; this creates a genuine continuity risk for a user-owned project.

Repo popularitycaution

Seven stars, three forks, and one watcher indicate limited external adoption and review. This is supporting caution rather than a decisive health problem because the package shows active development and tests.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning reduces repository hygiene and transparency, though it does not by itself indicate abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hirale

Direct Dependencies

DependencyLast ReleaseScore
jaybizzle/crawler-detect
Version ^1.2
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform