Package Health

mariohamann/statamic-figma-assets

This is a usable, stable-major package with a correctly matching repository, recent publication activity, a clear README, repository tests, a small dependency surface, and no deprecation or dangerous workflow findings. However, maintenance capacity appears thin: the registry has one maintainer, repository commit activity shows no commits and no active maintainers in the last 3 months, and the project lacks security scanning, a security policy, and explicit workflow token permissions. It is not currently unfit to depend on, but adopters should monitor maintenance and review releases carefully.

Latest v2.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Health Score Breakdown

Lifecycle scriptscaution

A post-autoload-dump install-time script is present, creating some installation-time behavior that consumers should understand, but this signal alone does not indicate an unsafe workflow.

Maintainerscaution

Only one registry account has publish access, which creates a limited publishing continuity and bus-factor concern; the individual-owned repository provides some backing but does not remove the single-publisher risk.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing signal to compensate for the narrow maintainer base.

Release historycaution

The package is about 503 days old with 6 releases and one release in the last 12 months; this shows ongoing publication but a relatively low recent release cadence.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months, which is a meaningful maintenance slowdown despite the recent push and release observations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mario Hamann

Direct Dependencies

DependencyLast ReleaseScore
statamic/cms
Version ^6.0
—
—

Weekly Downloads

Info

Last Published
21 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform