Package Health/linkorb/userbase-role-contracts

linkorb/userbase-role-contracts

This is a small, clearly scoped MIT-licensed contracts package with a matching repository, organization backing, a stable release, no deprecation status, and a release and repository push very recently observed. Its main concerns are limited release history, no recorded commit activity or issue activity in the recent windows, no tests or changelog, no security policy, and no security scanning; the absence of tests is less significant for a five-file interface-only package, but the maintenance and security-process evidence remains thin. It is likely usable as a dependency, though adopters should verify upstream maintenance before relying on it for long-lived critical integrations.

Latest v4.123.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is mature at 2,625 days old and has a release observed recently, but only nine releases overall and one in the last 12 months indicate a relatively sparse release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern. The recent push and release partially offset this, but do not establish sustained activity.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently negative for a small interface package, but it provides little evidence of active maintenance or community support.

Repo tooling

Composer build tooling is present, but no security-scanning tooling is detected. The missing scanner is a process gap, although the package is very small and has no install scripts.

Security policy

The repository has no security policy. This lowers vulnerability-reporting transparency, though the package's narrow contracts-only scope limits the practical exposure compared with a larger implementation package.