spiral/telemetry

The package includes a README, repository tests, MIT licensing, and static security scanning. Workflow references are unpinned, and recent commits come from one contributor, so maintenance continuity and build reproducibility warrant monitoring.

Latest 3.17.2

Packagist

78%

Total Score

Maintainer Stability

Maturity

100

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the recent commits. Organization ownership provides some handoff capacity, but no second recently active contributor is shown, leaving a meaningful continuity risk.

Repo commit activity

The repository recorded 6 commits in the last 3 months, showing recent activity, but all were made by one active maintainer. The activity is positive while its concentration limits continuity.

Security policy

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.

Workflow audit

Both workflows were analyzed cleanly with no untrusted checkouts, injection findings, or excessive permissions. However, all 2 action references are unpinned, leaving avoidable reproducibility and action-tampering exposure.