magdv/robo-paracept

The package has clear documentation, tests, changelog, and an MIT license, with a matching organization-owned repository. Its maintenance record is thin, and the workflow uses three unpinned actions without a security policy.

Latest 0.0.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is the strongest abandonment concern in the available evidence.

Release history

Only two releases exist, both published on the same day, with no release in the last two years. That suggests limited ongoing maintenance capacity for a package still at version 0.0.2.

Security policy

No security policy was found in the repository. This is a transparency gap, although it is less significant than the inactive maintenance record.

Version stability

Version 0.0.2 is not a stable major release, so the public API may still change. The release does have a recorded GitHub release, which provides some release transparency.

Workflow audit

The single workflow was fully audited with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving avoidable build-integrity risk.