kylekatarnls/morph

The source includes a full test suite, release notes, a clear README, and no install-time scripts. Prefer a better-established alternative because this release has not been updated since 2021 and closely borrows another package’s identity.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of kylekatarnls/update-helper, which has 320,104 monthly downloads, while this package has none; the explicit identity overlap makes it likely consumers wanted the lookalike.

Release history

There has been only one release, on November 7, 2021, with no releases in the last 12 months. The repository is still present, but the registry history shows little release maturity.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the package’s long release gap and raising maintenance risk.

Security policy

The linked repository has no security policy. This is a transparency gap, although the package’s small scope and available source reduce the practical impact.

Workflow audit

The single workflow was fully analyzed with no injection findings, but all four referenced actions are unpinned, leaving build inputs less reproducible.