ozz/core

Documentation and security transparency are thin, with no README, tests, changelog, or security policy collected. The repository is substantial and releases are frequent, but the linked repository does not clearly match the package name.

Latest 1.4.1

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health checks

Maintainers

Only one registry account has publish access. This is a narrow publishing base, although the repository's recent activity shows that the maintainer is currently active.

Package scaffolding

The release includes GitHub release notes for this version, but it has no README, tests, or changelog in the collected package metadata. The missing tests and changelog are normal for published artifacts, while the missing README weakens consumer transparency for this framework library.

Project backing

The repository owner is an individual user rather than an organization, so the concentrated maintenance and publishing responsibility is not visibly backed by a broader project team.

Repo bus factor

All 57 recent commits came from one contributor, leaving no demonstrated handoff capacity if that person becomes unavailable.

Repo package mention

The repository name does not match the package name, and no README mention was collected, so the source-to-package relationship is not clearly established by this signal.