Package Health/orisai/stream-wrapper-contracts

orisai/stream-wrapper-contracts

The source includes tests, a changelog, a license, and dependency-review checks. Workflow permissions and completely unpinned actions add supply-chain hygiene concerns; pin the 19 referenced actions before adopting it in a sensitive build.

Latest 1.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is the package's only release, published about 13 months ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the stable 1.0.0 version.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months. The single release and otherwise healthy project structure do not offset the lack of recent development evidence.

Workflow audit

All 19 analyzed action uses are unpinned, and two of three workflows grant top-level write permissions. The pull_request_target workflow has no untrusted checkout or script-injection findings, so this is workflow hygiene caution rather than a severe risk.