Package Health/tomvondracek/bolt-discussion

tomvondracek/bolt-discussion

This is a promising and currently healthy release to depend on: it is not deprecated or archived, has recent activity, a stable non-prerelease version, a coherent repository that matches the package, a substantial test suite, changelog, license, and conservative workflow permissions. The main risks are the package's young age (72 days), single-maintainer and single-contributor bus factor, very low repository adoption, and absence of a security policy or security-scanning tooling. These concerns warrant monitoring and perhaps an internal fallback plan, but the observed maintenance activity and project hygiene make the package usable rather than an abandonment liability.

Latest v2.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publishing access. This is a real continuity concern for a user-owned project, although repository activity shows that the maintainer is currently active.

Project backing

The repository is owned by a user rather than an organization, so there is no organizational maintenance handoff or backing signal to offset the single-maintainer concentration.

Release history

The package is young at 72 days with four releases, but releases have been frequent, with a median interval of about 4 days; this supports active development while leaving limited long-term history.

Repo bus factor

One contributor made all 24 commits in the last 3 months, creating a concentrated bus factor and a meaningful continuity risk; no organization backing is present to compensate for it.

Repo popularity

The repository has one star, zero forks, and zero watchers. This is weak adoption evidence, but popularity is supporting evidence only and does not outweigh the direct maintenance signals.