wepesi/view

Its Apache-2.0 licensing, clear README, and minimal dependency footprint make adoption straightforward. The small project has little recent community activity, so future fixes and support may be limited.

Latest v1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over three years, with only four releases overall and none in the last 12 months. That materially raises abandonment risk despite its earlier roughly 49-day median release interval.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the release gap and indicating limited evidence of ongoing maintenance.

Repo popularity

Two stars, no forks, and one watcher show a very small user and contributor footprint. Popularity is only supporting evidence, but this provides little external maintenance capacity to offset inactivity.

Security policy

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less serious for this small, simple package than for a security-sensitive component.

Workflow audit

The single workflow is fully analyzed, uses read-only permissions, and has no flagged findings, but both of its two action references are unpinned. That is a modest reproducibility and supply-chain hygiene concern.