tonsinn/img-navi-bundle

Usable with caveats: the package is clearly documented, licensed, actively changing, and not deprecated, but it is only seven days old and all recent commits come from one contributor. The repository also lacks a security policy and explicit workflow token permissions.

Latest v1.0.3

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it offers no organizational handoff or support redundancy.

Release history

The package is only 7 days old, with four releases and a median interval of about 15 hours. This shows active initial development but provides little evidence of long-term maintenance or release stability.

Repo bus factor

All 21 recent commits were made by one contributor, giving the project a very low bus factor and creating a meaningful continuity risk if that contributor becomes unavailable.

Repo popularity

The repository has 1 star, 0 forks, and 0 watchers. For a package only 7 days old this is not a severe concern, but it provides no meaningful external adoption evidence yet.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and assurance gap rather than evidence that the package is unsafe.