telstatic/thresh

The artifact has a clear MIT declaration, a matching repository, a usable README, and no install-time scripts. Those positives do not compensate for its lack of recent maintenance and withdrawn package status.

Latest 0.0.4

Packagist

12%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.

Release history

The latest release was about 5 years ago, with no releases in the last 12 months and only four releases overall. That strongly indicates abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap.

Version stability

Version 0.0.4 is not a prerelease, but the 0.x version line still indicates limited maturity. The broader abandonment evidence is more significant.

Workflow audit

The single workflow was fully analyzed with no reported audit findings or untrusted triggers, but both action references are unpinned. That is a minor reproducibility and supply-chain hygiene gap.