manychois/simdom

The release is well documented, tested, licensed, and backed by a matching source repository with security scanning. Its small maintainer base, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.

Latest 0.3.1

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has six releases over about three years, but only one release in the last 12 months. That indicates a slower maintenance pace without showing abandonment by itself.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Although the repository was pushed in January 2026, the recent quiet period raises maintenance risk.

Security policy

The repository has no published security policy. This is a transparency gap for a library that processes HTML documents, though security scanning tools provide some compensation.

Version stability

Version 0.3.1 is a stable, non-prerelease release, but the package remains below 1.0, so compatibility expectations are less mature than for a stable-major project.

Workflow audit

The sole workflow was fully analyzed, uses read-only permissions, and has no detected dangerous findings, but all four action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.