lara-zeus/tiles

The package also has clear documentation, a license, security contact, and pinned workflow actions. Its short history and one-person recent commit activity leave less evidence of durable maintenance, while one high-confidence workflow check needs attention.

Latest 3.0.0

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 103 days old, with all 7 releases published in that period and a median release interval of 0 days, so its long-term maintenance record is still limited.

Repo bus factor

All recent repository commits come from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activity

Only 1 commit was recorded in the last 3 months, by 1 active maintainer, which provides limited evidence of sustained maintenance for a package this young.

Workflow audit

All four workflows were analyzed and all 10 action references are pinned, with no untrusted checkout or script-injection sink. However, a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, and that workflow has top-level write permissions, warranting caution.