Package Health/visualbuilder/ai-translate

visualbuilder/ai-translate

Clear documentation, tests, and a matching source repository make the package straightforward to understand. Its small dependency set and lack of install-time scripts reduce adoption friction, but the maintenance and licensing concerns remain substantial.

Latest 1.0.12

Packagist

46%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over three years: its latest release was July 12, 2023, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite its 13 total releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.

License

The manifest declares GPL-2.0-or-later, while the artifact license files were detected as MIT and GPL-3.0. The release is licensed, but the mismatch creates uncertainty about which terms govern use.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though the package does provide tests and a visible source repository.

Workflow audit

Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all four action references are unpinned. This is a supply-chain hygiene weakness, not a severe standalone risk.