omarwebdev/plass

The package has a clear README, tests, release notes, and a small dependency surface. Its MIT declaration, read-only workflow permissions, dependency scanning, and matching repository make the project transparent despite limited activity.

Latest v1.0.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published over three years ago, with no releases in the last 12 months. That is strong evidence of limited ongoing maintenance for a library intended to grow over time.

Project backing

The repository is owned by an individual rather than an organization, so the single-release and inactive-maintenance concerns are not offset by visible organizational backing.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that may no longer be actively maintained.

Security policy

No repository security policy is present. This is a minor transparency gap for reporting vulnerabilities, but it does not by itself show abandonment or make the release unfit.

Workflow audit

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, injection issues, or other findings. However, all four action references are unpinned, which is a minor reproducibility and workflow-hygiene weakness.