solcik/extras

The package has tests, a clear MIT license, and only two runtime dependencies. Its single-maintainer project has had no commits or releases for about 18 months, while all 15 workflow actions are unpinned.

Latest v0.5.6

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, leaving little publishing redundancy. This is a real resilience concern for a user-owned project without evidence of broader backing.

Release history

The package has had no releases in the last 12 months, and its latest release was published about 18 months ago. Earlier releases show project history, but the current release cadence raises maintenance concerns.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Security policy

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence of an active security problem.

Workflow audit

The workflow audit was complete and found no dangerous triggers, untrusted checkouts, or injection issues. However, all 15 referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.