Package Health/ohseesoftware/oh-see-gists

ohseesoftware/oh-see-gists

It has a clear MIT license, tests, release notes, and a matching organization-owned repository. The small dependency set and clean workflow audit help, but ongoing maintenance should be confirmed before adopting it for a long-lived application.

Latest v3.2.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases, but none in the last five years and the latest registry release was in June 2021. This is the strongest evidence of possible abandonment, despite its earlier release activity.

Repo commit activity

The repository had no commits and no active maintainers in the last three months. Combined with the old latest release, this increases the risk that maintenance has stalled.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene gap, but the package has a license, tests, and a visible source repository.

Workflow audit

The single workflow was fully analyzed with no detected dangerous findings or untrusted checkout paths. However, all four action references are unpinned, which weakens build reproducibility, and no top-level permissions block is present.