johndoh/taskwatermark

Documentation, licensing, and a small dependency surface reduce adoption friction. Single-user ownership, no recent commits, and absent security scanning leave limited assurance for long-term support.

Latest 0.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed. That is not evidence of poor maintenance by itself, but it leaves little publishing redundancy for a user-owned project.

Project backing

The repository is owned by a user account rather than an organization, so the project has limited visible institutional backing.

Release history

The latest registry release was in June 2022, with no releases in the last 12 months and only three releases overall; this is a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activity

There were no commits and no active maintainers in the last three months, weakening confidence in ongoing maintenance even though the repository had a recent push.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. For a small plugin this is a moderate transparency gap rather than a severe risk.