Package Health/staabm/side-effects-detector

staabm/side-effects-detector

Usable with caveats: it is a small, clearly licensed package with tests in the repository, a matching source project, and safe CI workflows. However, the registry has had no release in nearly two years and there has been no recorded commit activity in the last three months, so maintenance continuity is uncertain.

Latest 1.0.5

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There have been seven releases, but none in the last 12 months and the latest registry release was nearly two years ago. This is a meaningful maintenance concern despite the short initial release interval.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although two pull requests were merged recently, the lack of recent commit activity leaves ongoing maintenance capacity uncertain.

Security policy

No security policy was found. This is a transparency gap for reporting vulnerabilities, though the small package has Dependabot scanning and no dangerous workflow patterns.

Token permissions

All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege permissions would make CI behavior more transparent.