ocubom/base-convert

This is a generally healthy, usable dependency with a long history, a stable v3.0.0 release, current repository activity, a matching and well-documented source repository, minimal runtime dependencies, and repository tests that compensate for tests not being packaged. The main concerns are the small release history, single-maintainer and single-contributor concentration, very low recent activity, absent security scanning and security policy, and an undeclared top-level workflow permission policy. These reduce resilience and transparency but do not indicate abandonment or make the package unfit to depend on.

Latest v3.0.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a resilience concern for a user-owned project because publishing continuity depends on one person, though repository activity shows that the maintainer is still active.

Project backing

The repository owner is an individual user rather than an organization, so there is no organizational maintenance-backing signal to compensate for the concentrated maintainer and contributor base.

Release history

The package is mature at 3535 days old, but it has only 6 releases and 1 release in the last 12 months, with a median interval of about 354 days. This suggests a deliberately slow or lightly maintained release cadence rather than strong ongoing release activity.

Repo bus factor

All recent commits came from one contributor, giving a 100% top-contributor share and a low practical bus factor. The repository is user-owned, so there is no organizational backing shown to offset this concentration.

Repo commit activity

There was 1 commit by 1 active maintainer in the last 3 months. The recent push demonstrates some maintenance, but the low volume indicates limited ongoing activity.