vaclavvanik/dom-loader

This is a generally usable and transparently structured package: it has been available since 2021, is on a stable major version, is not deprecated, has a matching repository with tests and a changelog, and was published and pushed very recently. The main concerns are limited release history, no commit activity or active maintainers observed in the last 3 months despite the recent release, a single registry maintainer, and missing security scanning, security policy, and explicit workflow token permissions. Its very small popularity is weak supporting evidence rather than a decisive problem, and the missing tests and changelog in the artifact are compensated by their presence in the repository.

Latest 1.1.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

A single registry publisher account creates some continuity risk, although the linked repository is user-owned and the package has recent release activity.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing to compensate for the single registry maintainer.

Release history

The package is mature at 1,762 days old and has two releases in the last 12 months, but only four releases overall and a highly clustered release pattern provide limited long-term release evidence.

Repo commit activity

No commits and no active maintainers were observed in the last 3 months. The recent release and repository push are compensating evidence, but the absence of ongoing commit activity still indicates limited observed maintenance capacity.

Repo issue activity

There are no open issues or pull requests, and no recent issue or pull-request activity; this is neutral for a small package but provides little evidence of an active maintenance community.