laxap/bootstrap-grids

Usable with caveats: the package is mature, actively released, unarchived, and clearly backed by its matching repository. However, recent commit activity is absent, testing and security coverage are thin, and the install script and workflow permissions deserve review.

Latest v6.1.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-install-cmd script runs during installation, adding execution behavior that should be reviewed before adoption. No provided signal shows that this script is unsafe, so this is a review concern rather than a severe risk.

Package scaffolding

The artifact includes a substantial README and the repository uses GitHub Releases, but neither the artifact nor repository contains tests or a changelog. The missing tests reduce confidence in regression protection for this functional extension.

Project backing

The registry namespace and repository are associated with the same individual owner, and the repository is not organizationally backed. The small two-account registry maintainer base therefore offers limited redundancy.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The very recent release and repository push provide some compensation, but the lack of sustained commit activity is a meaningful maintenance concern.

Repo popularity

The repository has 10 stars, 38 forks, and 7 watchers, indicating a small user and contributor footprint. Low popularity is supporting caution rather than evidence that the package is unfit.