sil-org/ssp-utilities

This is a generally healthy and usable dependency: it has existed since 2017, is on a stable non-prerelease version, is not deprecated, has a matching organization-owned repository, includes a license, tests, build tooling, and no install-time scripts or dangerous workflow patterns. The main concerns are low repository popularity, no commits or active maintainers in the last 3 months, a relatively sparse release cadence, and missing security-policy and workflow permission hardening. A recent release and merged pull request provide some evidence of continued maintenance, so these concerns lower confidence in long-term responsiveness rather than making the package unfit to adopt.

Latest 2.2.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has been released since 2017 with 12 releases, including 2 in the last 12 months, though the median interval of about 353 days indicates deliberate but relatively slow release activity.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months, which is a meaningful recent-maintenance concern despite the current release and recent merged pull request.

Repo popularity

The repository has zero stars and forks and only 6 watchers, so external adoption and community support appear limited; popularity is supporting evidence, but this modestly increases maintenance-risk uncertainty.

Repo tooling

The repository uses Make and Composer build tooling, but no security scanning tools were detected; the missing scanning is a hygiene gap rather than evidence of abandonment.

Security policy

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.