lesname/hydrator

Recent releases, repository tests, and security scanning provide useful maintenance evidence. However, all recent commits came from one contributor, and the linked repository does not clearly identify this package; its workflow also leaves all 15 action references unpinned.

Latest 0.4.8

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 4 commits in the last 3 months, giving the project a top-contributor share of 100%. Organization ownership offers some handoff potential, but no second active contributor is shown.

Repo commit activity

Four commits were made in the last 3 months, showing current activity, but that activity is concentrated in a very small maintenance base.

Repo package mention

The repository name does not match the package name, and no README package mention was found. That leaves uncertainty about whether the linked source repository is specifically for this package rather than a related or reused project.

Security policy

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence of abandonment by itself.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all 15 action references are unpinned, leaving the workflow exposed to moving action contents.