Package Health/riddlestone/brokkr-graphql

riddlestone/brokkr-graphql

The package includes a useful README, tests, release notes, a declared BSD-3-Clause license, and no install-time scripts. Its unpinned workflow actions and absent security policy add smaller maintenance and supply-chain hygiene concerns.

Latest v0.2.1

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on February 22, 2022, and there have been no releases in the last 12 months. This long pause is strong evidence of abandonment risk for a package intended as a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release gap. The repository is not archived, but there is no recent work to compensate.

Repo package mention

The repository name matches the package, reducing the risk of an unrelated source repository, but its README does not mention the package name. That leaves a modest ownership and source-association concern.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. This is a minor hygiene gap rather than evidence that the release is unsafe to depend on.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it is less serious than the prolonged inactivity.