Package Health/stefanak-michal/dragoncore

stefanak-michal/dragoncore

This release appears suitable to depend on: it is a stable major release from a package with nearly five years of history, 10 releases in the last 12 months, and a recent release cadence of about 6 days. The repository is active, not archived, contains documentation, tests, Composer tooling, and a clean workflow profile, while the package is MIT-licensed and not deprecated. The main risks are concentrated ownership and maintenance, with one maintainer responsible for all 22 commits in the last 3 months, very low repository adoption, no security policy, and workflow permissions that are not explicitly constrained; these warrant monitoring but do not outweigh the strong release and repository evidence.

Latest v4.3.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a genuine continuity concern, although the linked repository is also directly maintained by that owner and recent release activity is strong.

Project backing

The repository owner is an individual user rather than an organization, so the single-maintainer and single-contributor concentration is not compensated by organizational backing.

Repo bus factor

One contributor made 100% of the 22 recent commits, creating a material single-maintainer continuity risk; the individual owner appears active, which prevents this from being a severe abandonment signal.

Repo issue activity

There are 3 open issues and no issue or pull-request activity in the last month. This shows limited community interaction, though it is not by itself evidence of abandonment given the recent commits and releases.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Low adoption is supporting caution about external validation, but popularity alone is not evidence that the package is unsafe to depend on.