vaclavvanik/dom-to-array

This is a generally healthy, usable package with a clear MIT license, stable 1.2.0 release, matching repository, documented functionality, and repository tests and changelog that compensate for their absence from the artifact. The latest release and repository push are current, and the package is not deprecated or archived. However, its release history is sparse, repository commit activity shows no commits or active maintainers in the last three months, popularity is very low, and repository security hygiene is incomplete because no security scanning or security policy is present and workflow token permissions are not consistently constrained. These concerns warrant monitoring, but they do not by themselves make the package unfit to depend on.

Latest 1.2.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing maintainer is listed. This is a modest resilience concern for a user-owned project, though the linked repository and recent release provide some compensating evidence.

Project backing

The repository is owned by an individual user rather than an organization, so there is no organizational backing indicated. This increases maintainer continuity risk somewhat but is not inherently unhealthy.

Release history

The package has existed for about 4 years and 10 months with four releases, but only one release in the last 12 months and a median interval of about 570 days indicate slow release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release and push are current, the short-term activity gap weakens evidence of ongoing maintenance.

Repo popularity

The repository has only 1 star, 1 fork, and 1 watcher, indicating very limited community adoption. Popularity is supporting evidence rather than a verdict, so this is a caution rather than a severe risk.