Package Health/szenario-fordesigners/craft-vite-starter

szenario-fordesigners/craft-vite-starter

This is a generally healthy and actively maintained release: it has existed for over three years, has 51 releases including 18 in the last 12 months, is stable and not deprecated, and the linked organization-owned repository was updated very recently. The main concerns are maintenance concentration in one contributor, the absence of tests in both the artifact and repository, and missing security scanning and policy documentation. These are meaningful resilience and transparency gaps, but they do not outweigh the strong release cadence, active repository activity, build tooling, and package-repository alignment.

Latest 2.5.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog, and the repository also has no tests or changelog. The repository does provide a README and uses GitHub Releases, which compensates for some documentation and changelog concerns, but the absence of tests in both locations remains a maintenance-quality gap.

Repo bus factor

All seven commits in the last 3 months came from one contributor, producing a complete short-term concentration of maintenance responsibility. Organization ownership provides some handoff potential, but no second active contributor is shown by this signal.

Repo commit activity

Seven commits were made in the last 3 months by one active maintainer, demonstrating current activity but also limited recent maintenance depth.

Repo tooling

The repository uses Make and Composer build tooling, which supports reproducible project operations, but it has no detected security-scanning tools. The missing scanning coverage is a transparency and assurance gap rather than evidence of compromise.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations undocumented.