mazzz1y/roundcube-ai

This is a usable but very new release with solid basic packaging: it includes a README, tests, a complete-looking 21-file tree, Composer build metadata, no install lifecycle scripts, and no dangerous workflow patterns. However, the package was released today with only one release and no demonstrated commit or issue activity, so maintenance maturity and abandonment risk are not yet established. The repository also lacks security scanning and a security policy, while one release workflow has top-level write permissions. These are meaningful transparency and supply-chain hygiene gaps, but the package is not deprecated or archived and has a declared MIT license, so it falls in the caution rather than unhealthy range.

Latest v1.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so there is no observed organizational backing or maintainer redundancy to offset the package's limited history.

Release history

This package is only 0 days old and has one release, so there is no release history from which to establish maintenance reliability or upgrade continuity.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, so ongoing maintenance capacity cannot yet be demonstrated; the package's same-day creation explains but does not remove this uncertainty.

Repo issue activity

There are no issues or pull requests and no one-month activity. Given the repository's 0-day age, this is insufficient history rather than a severe inactivity signal, but it leaves community support unestablished.

Repo popularity

The repository has zero stars, forks, and watchers. For a package released today this is weak supporting evidence, but it is not by itself evidence of abandonment.