Package Health/jakoch/phantomjs-installer

jakoch/phantomjs-installer

The package has a clear README, matching source repository, MIT licensing, release notes, tests in the repository, and read-only workflow permissions. Its small project footprint and unpinned workflow actions leave less margin for long-term maintenance and build reproducibility.

Latest 3.0.3

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual, so the package identity is clear. The user-owned project also means there is no organization backing shown to offset the thin maintenance base.

Release history

The package has existed for over 12 years with 16 releases, but none were published in the last 12 months; the latest release was about 15 months ago. This indicates a meaningful maintenance slowdown, though the long history provides some maturity.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with no releases in the last 12 months, this is evidence of reduced maintenance capacity.

Workflow audit

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and read-only permissions. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.