php-coord/datapack-asia

Usable with caveats: it is a stable, licensed add-on with a recent release and a matching source repository. However, there have been no commits in the last three months, the repository has no tests or security policy, and its workflow does not declare token permissions.

Latest v1.5.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publishing access. The repository owner is an individual rather than an organization, so this represents a genuine bus-factor concern rather than normal organization publishing hygiene.

Package scaffolding

The artifact has a README and changelog, and the repository uses GitHub Releases, but neither the package nor repository contains tests. For a data-heavy add-on, this is a meaningful maintenance and verification gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent package release partly offsets this, but the lack of source activity still raises maintenance risk.

Repo issue activity

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This provides limited evidence of active project handling.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although the package's small add-on scope limits its effect on ordinary use.