Package Health

tomasvotruba/fast-unit

This is a usable but very young package with strong basic transparency: it has an MIT license, a matching source repository, active recent releases and commits, no deprecation, and no observed dangerous workflow patterns or install-time scripts. The main concerns are its 22-day age, pre-1.0 version, single-maintainer and single-contributor bus factor, absence of repository tests and security scanning, and incomplete workflow permission declarations. The package appears actively developed rather than abandoned, but its limited history and concentrated maintenance make it a dependency that warrants monitoring and cautious adoption.

Latest v0.1.6PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Maintainerscaution

There is one registry maintainer, Tomas Votruba. Because the linked project is user-owned rather than organization-owned, this reflects a genuinely narrow publishing base, though repository activity provides evidence that the maintainer is active.

Package scaffoldingcaution

A substantial README documents installation, usage, and binary rebuilding, and the repository uses GitHub Releases; however, neither the artifact nor repository contains tests or a changelog. The documentation and release evidence partly compensate for the missing changelog, but the lack of tests remains a maintenance-quality gap.

Project backingcaution

The source repository is owned by the individual user TomasVotruba rather than an organization. This provides a clear owner but no organizational maintenance redundancy, consistent with the single-contributor risk.

Release historycaution

The package is only 22 days old, although it has already had 7 releases and the latest release was published recently. The rapid release activity is encouraging but provides little long-term evidence of maintenance stability.

Repo bus factorcaution

All 5 recent commits came from one contributor, giving the project a complete single-contributor concentration. With a user-owned repository and no second active contributor, loss of that maintainer would materially increase abandonment risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomas Votruba

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
23 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform