peterlupu/curs-bnr

Healthy and suitable to depend on, with normal early-project caveats. It has active recent releases, strong repository hygiene, tests, security tooling, and a matching source repository; the main concerns are its 40-day history and complete reliance on one maintainer.

Latest v0.4.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 40 days old, but it has already published five releases, including the assessed release today. This shows active iteration, though there is not yet a long maintenance record.

Repo bus factor

One contributor made 100% of the eight recent commits. Since the repository is user-owned rather than organization-owned, there is no provided backing to compensate for this single-maintainer dependency.

Repo commit activity

The repository has eight commits in the last three months, all from one active maintainer. The activity is recent, but the narrow contributor base limits resilience.

Token permissions

The sole workflow does not declare top-level token permissions. No write permission is explicitly requested, but the missing declaration is a workflow-hardening gap.

Version stability

Version v0.4.1 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which partly offsets the maturity concern.