loveoss/traces

The MIT license, README, and matching repository make the package easy to inspect. Its four-release history, no recent commits, and absent tests or security policy provide little evidence of ongoing care; pinning this exact version is prudent.

Latest v1.0.3

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only four releases, with the latest published nearly nine years ago and none in the last 12 months. This is strong evidence of abandonment risk for a CLI dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and indicating no visible ongoing maintenance.

Package scaffolding

A README and release notes for this version provide useful consumer documentation, but the package and repository have no tests. The missing tests are a modest maturity concern for a maintained CLI tool.

Repo popularity

The repository has zero stars, forks, and watchers, offering no supporting evidence of community adoption or external review. Popularity is only supporting evidence, so this modestly lowers confidence rather than deciding the score.

Security policy

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though not severe on its own.