Package Health

orisai/nette-data-sources

The package is small and focused, with a clear source tree and ordinary Composer dependencies. Licensing, tests, and security scanning support adoption, but workflow references are not pinned and maintenance appears quiet.

Latest 1.0.3PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

92

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package has four releases since January 2023, but none in the last 12 months; the latest release was published in January 2025. This indicates limited recent release activity rather than clear abandonment.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months, reinforcing the long release gap. The repository is still present and backed by an organization, which keeps this from being a severe abandonment signal.

Workflow auditcaution

All 25 analyzed action references are unpinned, so workflow dependencies can change without a package release. Two workflows also grant top-level write permissions, but there were no detected untrusted checkouts, script injection paths, or audit findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marek Bartoš

Direct Dependencies

DependencyLast ReleaseScore
nette/neon
Version ^3.3.3
—
—
orisai/utils
Version ^1.0.0
—
—
orisai/exceptions
Version ^1.0.0
—
—
orisai/data-sources
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform