sparkouttech/bug-atlas

The small repository footprint and lack of security tooling add uncertainty. Its MIT licensing, changelog, and organization backing provide useful transparency, but the package has little evidence of ongoing care.

Latest v0.0.4

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over two years and none in the last 12 months, despite four releases overall. This is meaningful abandonment risk for a package still at v0.0.4.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, with the repository already inactive since May 2024. This materially raises abandonment risk.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant project, although it does not show unresolved maintenance debt.

Repo popularity

The repository has zero stars and only two forks. This is weak supporting evidence, but popularity alone does not establish that the package is unsafe to depend on.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The build setup is appropriate, while the missing security tooling is a modest transparency gap.