localgod/karla

The package is licensed, documented, tested, and backed by a matching repository with recent release work. Release history is sparse, recent commit activity is absent, and all 15 workflow action references are unpinned, so maintenance and build hygiene remain concerns.

Latest v1.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to broaden maintenance capacity.

Release history

The package has existed for about 10 years but only has four releases, with a median gap of about 4 years. One release appeared in the last 12 months, so this is a meaningful maintenance concern rather than abandonment evidence by itself.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Recent release and pull-request activity partly offsets this, but the current maintenance cadence is still unclear.

Repo popularity

The repository has five stars and one fork, showing limited adoption. This is only supporting evidence and does not outweigh the direct maintenance signals.

Security policy

The repository has no security policy. This is a modest transparency gap for reporting and handling vulnerabilities, not evidence that the package is unsafe.