Package Health/starterteam/starter-nessa

starterteam/starter-nessa

This release appears actively maintained and generally suitable to depend on: it has 20 releases over roughly 4.6 years, 10 releases in the last 12 months, a stable non-prerelease version, recent repository activity, automated build and dependency tooling, repository tests, and no deprecation or archival status. The main risks are a proprietary license, complete concentration of recent commits in one contributor, limited artifact documentation, absent security policy, and a release workflow with top-level write permissions. These concerns warrant review of licensing and continuity before adoption, but the maintenance and release evidence outweighs them.

Latest v14.4.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The package declares a proprietary license in its manifest and has no license file. This is a material adoption and redistribution constraint rather than an open-source transparency strength.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational handoff capacity to offset the concentrated contributor base.

Repo bus factor

All 39 commits in the last 3 months came from one contributor, giving a 100% top-contributor share. This creates a genuine continuity risk for an individually owned project.

Repo popularity

The repository has zero stars and forks and one watcher. This provides little external adoption evidence, but popularity is supporting evidence and does not outweigh the strong release and commit activity.

Security policy

No repository security policy was found. This weakens vulnerability-reporting transparency, although it is a hygiene gap rather than evidence of abandonment.