mfd/ai-filemetadata

This is a healthy, actively maintained release with a stable version, regular publishing history, a current non-archived repository, recent activity from two contributors, clear licensing, documentation, and a package layout that appears complete and directly tied to the package. The main reservations are the absence of tests and a changelog in both the artifact and repository, no repository security-scanning tooling, and workflows that do not declare top-level token permissions. These are meaningful hygiene gaps but do not outweigh the strong maintenance and project-backing evidence.

Latest 1.6.3

Packagist

84%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README and GitHub Releases are present, but neither the artifact nor repository contains tests or a changelog. Documentation and release evidence provide useful transparency, while the missing tests and changelog remain a maintenance-hygiene gap.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a security-hygiene limitation, though it is not evidence of abandonment by itself.

Token permissions

Both workflows lack top-level GitHub Actions permissions declarations. Although no workflow requests top-level write permissions, explicitly constraining permissions would provide stronger CI security hygiene.