Package Health/metrixs/mx-cookieless-analytics

metrixs/mx-cookieless-analytics

Usable with caveats: the release is active, licensed, documented, and not deprecated, but it is only 11 days old and all recent repository work comes from one contributor. The missing security policy and lack of security scanning add transparency concerns for a package that handles analytics integration.

Latest 1.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace is metrixs, but the linked repository is owned by an individual account rather than an organization. This provides limited organizational continuity evidence.

Release history

The package is very young at 11 days old, with three releases and a median interval of about 6 days. This shows active initial development but provides little evidence of long-term maintenance.

Repo bus factor

One contributor made all six commits in the last three months, leaving maintenance dependent on a single individual and increasing abandonment or handoff risk.

Repo popularity

The repository has no stars, forks, or watchers. Given that the package is only 11 days old, this is weak supporting evidence rather than a standalone adoption concern.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a transparency gap, though it does not by itself show that the release is unsafe.