reactedge/widgetbridge

The package has clear documentation, an active organization-owned repository, and frequent recent releases. It is young and still on a 0.x version, while all recent commits come from one contributor and no security policy or scanning is present.

Latest 0.7.5

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the five commits in the last 3 months. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activity

The repository had 5 commits in the last 3 months and one active maintainer. Recent activity is present, but the modest volume limits confidence in sustained maintenance capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and maintenance-hygiene gap rather than evidence of an unsafe release.

Security policy

No repository security policy was found. This weakens the project's documented process for receiving and handling vulnerabilities, though it does not by itself indicate abandonment.

Version stability

Version 0.7.5 is not a stable major release, so compatibility may still change. It is not marked as a prerelease and recent releases have not been labeled prereleases, which partly offsets the concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ReactEdge

Direct Dependencies

Dependency	Last Release	Score
magento/framework Version *	—	—
open-telemetry/api Version ^1.2	—	—
open-telemetry/sdk Version ^1.2	—	—
open-telemetry/exporter-otlp Version ^1.2	—	—