noehassiel/signature-pad

This is a coherent, very young package with a matching public repository, a complete-looking 20-file implementation, four releases over 17 days, recent commits, a license file, and no deprecation or install-time lifecycle scripts. Adoption carries meaningful caution because it is still pre-1.0, has only one active contributor, lacks tests, a changelog, security scanning, and a security policy, and has no demonstrated community activity; these gaps make long-term maintenance and release assurance less certain, though they do not make the package unfit to depend on.

Latest v0.1.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publishing access. This is a modest resilience concern for an independently owned package, although registry access alone does not establish actual maintenance capacity.

Package scaffolding

A substantial README is present, but neither the artifact nor repository contains tests or a changelog. The repository's use of GitHub Releases partly supports release communication, but the absence of tests remains a maintenance and confidence gap for a native cross-platform component.

Project backing

The repository is owned by an individual user, not an organization. That makes the single-contributor and single-publisher findings more consequential because no organizational maintenance capacity is shown.

Release history

The package is only 17 days old, although it already has four releases with a median interval of about 1.2 days. This shows active early iteration but provides little evidence of sustained maintenance over time.

Repo bus factor

One contributor made all four commits, giving a 100% top-contributor share. Because the repository is user-owned rather than organization-backed, there is no shown handoff capacity, creating a genuine bus-factor concern.