serversideup/oha

The project is only 78 days old, with three releases and three recent commits from one contributor. Its organization backing, clear README, exact-version release notes, MIT declaration, and scoped workflow permissions provide useful support, but all action references are unpinned and one workflow grants top-level write access.

Latest v2026.08.24

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 78 days old with three releases, including three in the last 12 months; this shows active publishing but gives little long-term maintenance evidence.

Repo bus factor

All three recent commits came from one contributor, concentrating maintenance responsibility despite the repository being owned by an organization.

Repo commit activity

There were three commits in the last three months, showing recent activity, but the volume is modest for a young project.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap for a package that redistributes executable binaries.

Security policy

The repository has no security policy, which weakens the documented process for reporting and handling vulnerabilities.