localheinz/diff

Usable with caveats: the release is licensed, tested, clearly backed by its matching repository, and has no install scripts or deprecation notice. However, it has had no registry release in over a year and no commits in the last three months, while its README directs users to another package.

Latest 1.3.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One workflow uses pull_request_target and another uses workflow_run, which merit review because they can carry elevated workflow context; no untrusted checkouts or script-injection patterns were detected.

Project backing

The registry namespace and repository owner match, providing direct ownership alignment. The owner is an individual rather than an organization, so the project has a relatively narrow visible backing base.

Release history

The package is mature, but it has had no registry release in the last 12 months; the latest release was over a year ago. That lowers confidence that fixes and updates are arriving regularly.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the repository was pushed in January 2026.

Repo issue activity

There is one open issue and six open pull requests, but none were opened or merged in the last month, suggesting limited current activity.