Package Health/softspring/http-cache-store-bundle

softspring/http-cache-store-bundle

The package includes tests, clear usage documentation, release notes, and security scanning. Its organization backing is reassuring, though recent work is concentrated in one contributor and six of seven workflow actions are unpinned.

Latest v5.5.13

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All three-month commit activity comes from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

The repository recorded one commit from one active maintainer in the last 3 months. Recent publishing is active, but the source-level activity is thin.

Repo popularity

The repository has zero stars and forks and only one watcher. This indicates limited visible adoption, but popularity is supporting evidence and does not outweigh the strong release cadence.

Security policy

No repository security policy was found. This is a transparency gap, though the provided CodeQL and Dependabot tooling partly offsets the concern.

Workflow audit

Both workflows were analyzed successfully, use read-only permissions, and have no dangerous triggers or audit findings. However, six of seven action references are unpinned, leaving avoidable build reproducibility and update risk.