Package Health/jeffersongoncalves/jq-cli

jeffersongoncalves/jq-cli

This is a healthy, actively maintained early-stage package with a stable 1.0.2 release, recent publishing and repository activity, a clear MIT license, coherent source/package alignment, reproducible build tooling, tests and changelog in the repository, and no deprecation or archive indicators. The main reservations are its young 77-day history, low adoption metrics, single registry publisher, absent security policy, and workflows that grant top-level write permissions; these warrant review before production adoption but do not outweigh the concrete maintenance and transparency evidence.

Latest 1.0.2

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publishing access, which creates publisher continuity risk; the linked repository nevertheless shows activity from two contributors, partially compensating for the thin registry maintainer base.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational handoff capacity to offset the small contributor and publisher base.

Release history

The package is young at 77 days and has only three releases, so long-term maintenance maturity is not established; however, the latest release was published recently and releases have continued during that period.

Repo popularity

The repository has only one star, zero forks, and one watcher, so external adoption and review are limited; this is supporting evidence rather than a decisive health failure.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; this is a transparency gap for a package intended for developer use.