Package Health/tiny-owl-kit/observability

tiny-owl-kit/observability

This is a newly published, pre-1.0 package with solid initial packaging and repository hygiene: it includes a license, README, changelog, tests, CI/release workflows, security scanning, and no install-time lifecycle scripts. However, its release history is less than one day old and repository activity shows no commits or active maintainers in the last three months, so long-term maintenance and stability are unproven. The organization-backed, non-archived repository and absence of deprecation or dangerous workflow patterns are reassuring, but the missing security policy and incomplete workflow permission declarations leave moderate transparency and CI-hardening gaps. It is reasonable for evaluation or controlled adoption, but production users should monitor maintenance closely.

Latest v0.1.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is less than 1 day old with only 3 releases, so its release cadence and ability to sustain maintenance are not yet established; the multiple initial releases provide only limited compensation.

Repo commit activity

The repository records 0 commits and 0 active maintainers over the last 3 months. Because the package is less than 1 day old this may reflect limited observation time, but it still leaves ongoing maintenance unproven.

Security policy

No repository security policy was found, leaving vulnerability-reporting and disclosure expectations undocumented.

Token permissions

One workflow lacks top-level permissions and the release workflow requests top-level write access. Although no dangerous workflow pattern was detected, the permission posture is not uniformly least-privilege.

Version stability

Version v0.1.2 is not a stable major release, which signals an immature API and higher compatibility risk for dependents.