lostfocus/jf2

The small dependency surface and clear MIT licensing keep adoption straightforward. Maintenance is light, with no commits in the last three months, and the workflow uses three unpinned actions; the recent release and repository tests provide useful counterweight.

Latest 0.4.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 4 years and has five releases, but only one release was published in the last 12 months and the median interval is about 319 days. This indicates a slow release cadence, though the latest release is recent.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of current development activity raises maintenance risk.

Repo issue activity

There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is neutral for a small stable project, but it provides little evidence of active community maintenance.

Security policy

The repository has no security policy. For a small library this is a transparency gap, although Dependabot provides some compensating security tooling.

Version stability

Version 0.4.1 is not a prerelease, and recent releases have no prerelease share. The unfinished 0.x major version still signals compatibility may change before 1.0.