pushinbr/pam-native

The package includes tests, changelog entries, a clear license, and a substantial source tree. Its organization backing and very active recent development help, but the single-contributor base and workflow pinning leave meaningful maintenance and build-integrity concerns.

Latest v1.0.29

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 28 days old but has 33 releases, including 33 in the last 12 months and a median interval of 0 days. This shows intense activity, though the unusually rapid cadence provides limited long-term stability evidence.

Repo bus factor

All 473 recent commits came from one contributor, giving the project a single-person maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce this concentration.

Repo popularity

The repository has 42 stars and no forks or watchers. This is modest supporting evidence, but popularity is not decisive for a young package.

Repo tooling

Composer is used as a build tool, but no security-scanning tools were detected. The absence of scanning is a modest transparency and hygiene gap for a package with native mobile and Rust components.

Security policy

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, which is a real but non-severe transparency gap.