voku/agent-loop

The package is well documented and licensed, with repository tests, active issue handling, security scanning, and a security policy. Its short history provides limited evidence of long-term stability.

Latest 0.20.44

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by a personal user account rather than an organization, so the concentrated two-contributor maintenance pattern has no visible organizational handoff benefit.

Repo bus factor

Two contributors were active, but one made about 91% of the recent commits. The second contributor provides some continuity, yet ownership remains highly concentrated.

Repo popularity

The repository has four stars and no forks, so external adoption evidence is limited. Popularity is supporting evidence only and does not outweigh the strong activity signals.

Version stability

Version 0.20.44 is not a prerelease, but the package remains below 1.0, so compatibility expectations are less established than for a stable-major release.

Workflow audit

All 47 analyzed action references are unpinned, which weakens build reproducibility, and one high-confidence template-injection finding was reported in ci.yml. No untrusted checkout or script-injection sink was found, so these are workflow-hygiene concerns rather than a severe standalone risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Lars Moelleken

Direct Dependencies

Dependency	Last Release	Score
voku/agent-map Version ^0.18.0	—	—
helgesverre/toon Version ^3.1	—	—
voku/agent-kanban Version ^0.4.4	—	—
voku/agent-session Version ^0.7.1	—	—
voku/portable-utf8 Version ^6.1	—	—