sebastianfeldmann/cli

The source includes a full test suite, matching README, and release notes for this version. Its small dependency surface and MIT license reduce adoption friction; pin workflow actions and watch for renewed maintenance.

Latest 3.4.2

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

A post-install-cmd script runs during installation, adding execution behavior that deserves review even though this signal alone does not establish a severe risk.

Release history

The package has 28 releases since January 2017, but none in the last 12 months and the latest release was nearly two years ago. This is a meaningful maintenance concern despite its established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed more recently and this release has notes, but current activity remains weak.

Security policy

The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities. This is a modest concern rather than evidence of abandonment on its own.

Workflow audit

All workflows were analyzed with no reported audit findings or untrusted-trigger sinks, but both action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions are a hygiene weakness.