scavix/wdf-googlevis

This release appears usable and actively published, with eight stable releases in the last 12 months, no registry deprecation, a current non-archived organization-owned repository, a clear license, and a small dependency footprint. However, repository activity is very thin—only one commit from one contributor in the last three months—and the package and repository provide no tests or changelog, while the repository has no security policy or security scanning. The organization backing and recent release activity reduce abandonment concern, but the limited engineering and security transparency warrant caution before adopting it as a critical dependency.

Latest v1.1.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README documents installation, usage, and the core dependency, but neither the artifact nor repository contains tests or a changelog. For a wrapper package this is a meaningful transparency and verification gap.

Repo bus factor

All recent commits come from one contributor, creating concentration risk. The organization-owned repository provides some handoff capacity, so this is caution rather than a severe standalone risk.

Repo commit activity

Only one commit was recorded in the last three months from one active maintainer. Recent release activity and organization backing compensate partly, but the observed maintenance pace is still thin.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers confidence in community adoption but is not by itself a major health failure.

Repo tooling

Composer is used as a build tool, but no security scanning tool is configured. The build tooling is appropriate, while the missing scanning reduces security-process transparency.