Package Health/tourze/user-tag-contracts

tourze/user-tag-contracts

The small contract package is well documented, tested, licensed, and has a stable 1.0.0 release. Its repository has had no commits in three months, and all three workflow actions are unpinned. No security policy is published, leaving modest transparency and maintenance concerns.

Latest 1.0.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no clear organizational backing to offset the thin activity evidence.

Release history

The package has three releases over 496 days, with one release in the last 12 months and a median interval of about 88 days. This shows an established release history but a currently slow cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months. For a tiny, stable interface package this may reflect completion, but it weakens evidence of ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external validation.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This is a modest repository hygiene gap rather than evidence that the package is unsafe.