serversideup/spin

This is a healthy, mature release with a four-year history, 72 releases, 12 releases in the last 12 months, and a latest release published very recently. The repository is active, unarchived, clearly matched to the package, organization-backed, documented, tested, licensed, and supported by Dependabot and a security policy. The main residual concern is workflow permission hygiene: two workflows lack top-level permissions and two publishing workflows declare write access, while recent issue activity is quiet; these warrant review but do not outweigh the strong maintenance and transparency evidence.

Latest v3.5.1Packagist

Health Score Breakdown

Repo issue activitycaution

There are only seven open issues and one open pull request, but no new or closed issues in the last month; this suggests limited recent issue movement and is a mild maintenance caution rather than evidence of abandonment.

Token permissionscaution

Two workflows omit top-level permissions and two publishing workflows declare top-level write access; because these include release automation, the permissions should be reviewed for least privilege.

View all 17 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Dan Pastori

Jay Rogers