Package Health/manticoresoftware/manticoresearch-backup

manticoresoftware/manticoresearch-backup

This is a healthy, actively maintained release with a substantial history: 61 releases over roughly 3 years and 6 releases in the last 12 months, including a stable non-prerelease 1.11.0. The package is backed by an unarchived organization-owned repository that was pushed recently, includes extensive tests and a reproducible Composer-based structure, and has no install-time lifecycle scripts or registry deprecation. The main concerns are concentrated commit activity (10 of 11 recent commits from one contributor), absent security scanning and security policy, and workflow configuration gaps including an untrusted checkout in the release workflow; these warrant review of the release process but do not outweigh the strong maintenance and project-backing evidence.

Latest 1.11.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

No pull_request_target or script-injection workflows were found, but the release workflow contains an untrusted checkout in a workflow_run context, which warrants review of release permissions and artifact handling.

Repo bus factor

One contributor made 10 of 11 recent commits, creating a meaningful concentration risk, although a second contributor remains active and the repository is organization-owned.

Repo issue activity

The repository has 7 open issues and 2 open pull requests, with 3 pull requests merged in the last month; the lack of newly opened or closed issues suggests limited issue activity but not clear neglect.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected; the missing scanning coverage is a genuine repository hygiene gap.

Security policy

No SECURITY policy was detected, leaving vulnerability-reporting and response expectations undocumented.