scavix/wdf-gauge

This is a usable, transparently packaged release with a clear LGPL license, a stable release line, regular releases over roughly one year, no registry deprecation, no install-time scripts, and organizational repository backing. The main concerns are limited recent development activity—one commit from one contributor in the last three months—along with no tests, changelog, security policy, or security scanning, and negligible repository popularity. The package is small and focused, so some omissions are understandable, but the thin recent activity and contributor concentration warrant caution before making it a critical dependency.

Latest v1.1.3

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present, but neither the artifact nor repository contains tests or a changelog. For a small wrapper package this is not disqualifying, but the absence of repository tests leaves limited evidence of regression coverage.

Repo bus factor

All three-month commit activity is concentrated in one contributor, with a 100% share. Organization ownership provides some handoff capacity, but no second recently active contributor is shown, so the current activity still has a meaningful bus-factor concern.

Repo commit activity

Only one commit was recorded in the last three months, from one active maintainer, indicating thin recent development activity despite the recent release history.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This avoids an unresolved-maintenance backlog, but it also provides little evidence of an active user or contributor community.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation but is not by itself evidence that the package is unsafe to depend on.