szepeviktor/empty-string

The package is deliberately small, with a clear README, repository tests, and no install-time scripts. Resolve the license mismatch and pin the three workflow actions before relying on it broadly; no commits in three months also limits maintenance evidence.

Latest v1.0.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

License

The manifest declares MIT, but the artifact and repository license files are detected as CC0-1.0. A license is present, but the mismatch creates meaningful clarity risk for consumers.

Release history

The package has two releases, both published within roughly 23 minutes, and has existed for 105 days. This shows an initial release sequence but provides little long-term maintenance history.

Repo commit activity

There were no commits and no active maintainers in the last three months. For a package only 105 days old, this limits evidence of ongoing maintenance, although the small scope may reduce the need for frequent changes.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three referenced actions are unpinned. That is a workflow hygiene and reproducibility concern, not a severe risk on its own.