Package Health/sezohessen/unit-conversions

sezohessen/unit-conversions

The package has a clear MIT license, tests in its repository, and only one runtime dependency. Its stable 1.1.0 API may still suit tightly controlled use, but ownership is thin and ongoing care is uncertain.

Latest 1.1.0

Packagist

46%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in October 2022, with no release in nearly four years. This is a substantial abandonment concern for a dependency, despite the stable major version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.

Workflow audit

The audit found high-confidence bot-condition and unpinned-container-image issues, and all eight action references are unpinned. A pull_request_target workflow also has top-level write permissions, increasing workflow supply-chain exposure even without an untrusted checkout or script injection.

Project backing

The repository is owned by an individual account rather than an organization, so the single registry maintainer reflects a thin backing structure and leaves limited visible continuity if that maintainer stops work.

Repo issue activity

There are no open issues and two open pull requests, with no issue or pull-request activity in the last month. The quiet issue tracker is not independently harmful, but the unmerged pull requests offer no evidence of active maintenance.