imagewize/aludra

Healthy and actively maintained, with clear source backing and strong release activity. The main caveats are that one contributor made all recent commits and the repository lacks security scanning, a security policy, and explicit workflow permissions.

Latest v2.37.3

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Repo bus factor

One contributor made all 175 commits in the last three months, creating meaningful continuity risk; organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Repo tooling

Composer is used as a build tool, but no security scanning tools are reported, leaving a security-hygiene gap despite the otherwise active project.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Token permissions

All three workflows lack top-level token permissions declarations. No top-level write permissions were found, but explicit least-privilege settings would provide stronger workflow hygiene.