voku/agent-learning

Clear documentation, tests, licensing, and security policy make integration straightforward. The small contributor base and entirely unpinned workflow actions warrant periodic review despite strong ongoing activity.

Latest 0.18.22

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, so the source identity is consistent, but there is no organization backing to offset the concentrated maintainer base.

Repo bus factor

Two contributors are active, but the top contributor made 83.9% of the 180 recent commits. This concentration creates a meaningful continuity risk if that contributor becomes unavailable.

Version stability

Version 0.18.22 is not a prerelease, but the package remains below 1.0, so its API may still change more readily than a stable-major release.

Workflow audit

All three workflows were analyzed with no untrusted checkout, script-injection, or auditor findings. However, all eight action references are unpinned and one workflow grants top-level write permissions, creating workflow reproducibility and least-privilege concerns.