inilim/tools

This release appears usable but carries meaningful maturity and transparency concerns. The repository is active, unarchived, directly matches the package, has 32 commits in the last 3 months, repository tests, and no registry deprecation or install-time lifecycle scripts. However, the project is only 60 days old with three releases, all recent activity comes from one contributor, and neither the package nor repository provides a license file or declaration. The missing artifact README is partly offset by a repository README, and the lack of a security policy and security scanning leaves additional process gaps. Dependence is reasonable with appropriate review, but this is not yet a highly mature or resilient dependency.

Latest 0.0.20260902

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

No declared license and no license file were found in the artifact or repository, leaving the legal terms for reuse unclear. This is a genuine transparency gap rather than a cosmetic omission.

Maintainers

Two registry accounts have publish access, but registry access is administrative evidence and does not establish active maintenance capacity. The repository activity indicates that actual recent work is concentrated in one contributor.

Project backing

The repository is owned by a user rather than an organization, so there is no organization-level backing to mitigate the single-maintainer concentration.

Release history

The package is only 60 days old and has three releases, with a median interval of about 30 days. This shows ongoing publication but provides limited evidence of long-term maintenance maturity.

Repo bus factor

One contributor made all 32 commits in the last 3 months, giving the project a complete recent commit concentration and creating a meaningful continuity risk for a user-owned repository.