vittix/panchang

Clear documentation, release notes, repository tests, and a security policy make integration and ongoing use easier. The project is young and maintained by one contributor, and all four workflow actions are unpinned.

Latest 2.4.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the single-contributor concentration is not visibly backed by an organizational handoff path.

Release history

The package is only 50 days old with five releases, including releases roughly every three days, which shows active early development but does not yet establish long-term maintenance.

Repo bus factor

All 34 recent commits came from one contributor, leaving maintenance dependent on a single person and creating a meaningful continuity risk.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Workflow audit

The workflows were fully analyzed with no injection or high-severity findings, and one workflow uses read-only permissions. However, all four action references are unpinned, reducing build reproducibility and supply-chain protection.