imedge/config

The package has a very small README and no published security policy, leaving consumers with little guidance. MIT licensing, organization backing, tests, and no install-time scripts are reassuring, but the project appears inactive and its workflow dependencies are not pinned.

Latest v0.3.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes tests, which supports basic project maturity, but its README is only 14 characters and provides no consumer guidance. The missing changelog is expected packaging practice and is not a concern by itself.

Release history

The package has had only three releases since September 2024, with no releases in the last 12 months and the latest release in July 2025. This is a meaningful maintenance concern for a young package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but current activity is absent.

Security policy

The repository has no security policy, reducing transparency about how maintainers handle vulnerability reports. This is a documentation gap rather than evidence of a security defect.

Workflow audit

All six analyzed GitHub Actions references are unpinned, so workflow builds can follow changing action revisions. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which limits this to a hygiene concern.