marshmallow/nova-tinymce

This is a generally healthy, established package: it has been maintained since 2020, is not deprecated or archived, has a stable current release, an organization-backed repository, a clear README and changelog, a matching repository, and no install-time lifecycle scripts. The main concerns are a very small recent commit and contributor base—two commits from one maintainer in the last three months—and the absence of repository tests and a security policy. Low popularity is supporting context rather than a verdict, while recent release and pull-request activity provide some evidence of ongoing maintenance. It is a reasonable dependency, but adopters should monitor maintenance continuity and validate behavior in their own Laravel Nova versions.

Latest v2.3.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README and changelog are present, and the repository uses GitHub Releases; the absence of tests is a maintenance-quality gap, but it is not by itself severe.

Repo bus factor

All recent commits came from one contributor, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but does not eliminate the observed single-contributor risk.

Repo commit activity

Only 2 commits occurred in the last 3 months, showing limited recent direct development activity; the recent release and merged pull requests partly compensate, but maintenance momentum remains worth monitoring.

Repo popularity

The repository has 4 stars, 1 fork, and 1 watcher. This is limited adoption evidence, but popularity is only supporting evidence and does not outweigh the stronger maintenance and ownership signals.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.