tienvx/ux-collection-js

The source includes tests, a clear README, matching MIT licensing, and no install-time scripts. Workflow references are all unpinned and no security policy is provided, adding maintenance and build-hygiene concerns.

Latest v1.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was July 17, 2022, with no releases in the past 12 months despite 36 releases overall. This long period without a new release is a substantial abandonment concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release gap and indicating no recent maintenance capacity.

Repo issue activity

There were no new or closed issues or pull requests in the past month, while two issues remain open. This provides no evidence of active issue handling.

Security policy

The repository has no security policy. This is a transparency and response-process gap, though it is secondary to the much longer maintenance lapse.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 8 action references are unpinned. That weakens build reproducibility without indicating a severe risk on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tien

Community contributions

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.12\|^3.0	—	—
symfony/form Version ^4.4.17\|^5.0\|^6.0	—	—
symfony/config Version ^4.4\|^5.0\|^6.0	—	—
symfony/http-kernel Version ^4.4.17\|^5.0\|^6.0	—	—
symfony/dependency-injection Version ^4.4.17\|^5.0\|^6.0	—	—