sanmai/round-robin

The package is small, dependency-light, clearly documented, and backed by repository tests and release notes. Maintenance rests with one active contributor, while workflow actions are entirely unpinned and lack a security policy, leaving limited long-term and build-integrity margin.

Latest 0.1.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, confirming ownership alignment but providing no organizational maintenance coverage.

Release history

The package is young, with three releases over about eight months and a median interval of roughly 104 days. That shows ongoing publishing but offers limited evidence of long-term maintenance.

Repo bus factor

One contributor made 100% of the last three months' commits. Because the repository is user-owned rather than organization-backed, this concentration is a meaningful continuity risk.

Repo commit activity

Only two commits were made in the last three months, all by one maintainer. Recent activity exists, but the narrow and light cadence limits confidence in sustained maintenance.

Security policy

No repository security policy is present. This is a transparency gap for reporting vulnerabilities, though the small, dependency-free runtime surface partly limits its practical impact.