thijsr/subtitles

Tests, documentation, release notes, and a small dependency surface make the package straightforward to inspect. The beta label and lack of a security policy leave less assurance for long-lived production use.

Latest v1.0.2-beta

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, all ending nearly ten years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the historically regular 24-day median interval.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the repository's last push being nearly ten years ago. This materially increases the risk that defects and compatibility issues will remain unresolved.

Project backing

The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the single-person project structure.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a modest transparency gap, though it is secondary to the long inactivity period.

Version stability

The assessed release is a prerelease beta, and all recent releases are prereleases. That indicates an unfinished API and adds compatibility risk for dependents.