okapi/wildcards

The small dependency surface and tested source tree reduce day-to-day adoption risk. Project hygiene is mixed, leaving less assurance that future fixes and automated releases will be handled promptly.

Latest 1.0.1

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published more than three years ago, and there were no releases in the last 12 months. This is meaningful abandonment risk despite the package having reached a stable 1.0.1 release.

Repo commit activity

The repository recorded no commits and had no active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.

Security policy

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. The small, simple package limits the practical impact but does not remove the gap.

Workflow audit

The single workflow was fully analyzed and uses read-only permissions with no detected dangerous sinks, which is positive. However, all 4 action references are unpinned, leaving the automation exposed to upstream reference changes.