ozznest/apm-agent

The package has a small runtime dependency set, no install-time scripts, and useful documentation, tests, licensing, and security-policy files. Its workflow actions are unpinned, adding modest maintenance and build-integrity friction.

Latest v1.3.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in roughly 4 years and 8 months: all 10 releases date from December 2021, with none in the last 12 months. This is strong evidence of abandonment risk despite the stable version number.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the registry's long release pause. This leaves little evidence of ongoing maintenance capacity.

Repo package mention

The repository name does not match the package name, and its README does not mention the package. That makes package ownership and source correspondence less transparent.

Repo popularity

The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no additional indication of an active user or contributor community.

Workflow audit

Both workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script-injection findings. However, all 3 analyzed action references are unpinned, which weakens build reproducibility; the pull_request_target triggers are not dangerous without a matching sink.