Package Health/spora-ai/spora-plugin-memories-frontend

spora-ai/spora-plugin-memories-frontend

This is an actively developed but very young package with five releases over 49 days, a current non-archived repository, recent pull-request activity, repository tests, and a package-specific organization-owned source repository. The main concerns are that the release has no license declaration or license file, all 20 recent commits come from one contributor, the repository lacks a security policy, and its single workflow does not declare top-level token permissions. The tiny artifact appears consistent with a compiled frontend because the repository contains the source and extensive tests, but the package remains relatively immature and should be adopted with normal dependency review and monitoring.

Latest v0.2.1

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

Neither a declared license nor a license file was found, leaving the legal terms for consuming this release unclear.

Release history

The package is only 49 days old with five releases and a median release interval of about 9 days, showing active iteration but limited historical maturity.

Repo bus factor

One contributor accounts for 100% of the 20 commits in the last three months. Organization ownership provides some maintenance backing, but no second active contributor is shown to reduce dependency on that individual.

Repo commit activity

There were 20 commits in the last three months, but all were produced by one active maintainer, so activity is healthy while resilience remains limited.

Security policy

No security policy is present in the repository, reducing transparency about vulnerability reporting and maintainer response procedures.