iliaal/statgrab

This release appears to be a healthy dependency for its intended use: it is a stable, non-deprecated package with a linked, active repository, comprehensive documentation and tests, explicit licensing, security policy, read-only workflow permissions, and no detected dangerous workflow patterns. The main concern is concentration risk: all eight commits in the last three months came from one contributor, and registry publishing is also controlled by one maintainer. Release history is relatively short, with three releases over 128 days, so the project has less demonstrated longevity than a mature long-running package, but current repository activity and strong project hygiene substantially mitigate abandonment and transparency concerns.

Latest 2.2.2

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

Only one registry account, Ilia Alshanetsky, has publish access. This is a concentration risk, although repository activity confirms that the same maintainer is currently active.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational handoff support to offset the concentrated maintainer and contributor base.

Release history

There have been three releases in 128 days, with a median interval of about 64 days. This demonstrates ongoing publication but provides only a short track record and moderate release cadence.

Repo bus factor

One contributor made all eight commits in the last three months, giving the project a low bus factor and creating a meaningful continuity risk for an independently owned repository.

Repo popularity

The repository has one star, zero forks, and one watcher, showing limited external adoption. Popularity is only supporting evidence, so this lowers confidence in community depth rather than making the package unfit.