Package Health/xndbogdan/filesize-conversions

xndbogdan/filesize-conversions

Its documentation, tests, MIT licensing, and minimal runtime dependencies make the package easy to evaluate. The repository has had no commits in over two years, and its workflows include high-confidence bot-condition and unpinned-image findings.

Latest v1.1

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has four releases, all concentrated in August 2022, with no releases in the last 12 months. This indicates a long period without published maintenance, although the stable version is established.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the broader lack of recent releases and indicating weak current maintenance.

Repository archived

The linked repository is not archived, but its last push was over two years ago, so the absence of archival status does not offset the stale activity.

Security policy

No security policy was found, leaving maintainers without a documented vulnerability-reporting path. This is a transparency gap, but not by itself a severe dependency risk.

Workflow audit

The audit completed all four workflows and found no untrusted checkout or script-injection path, but it identified high-confidence bot-condition and unpinned-image findings. All eight action references are unpinned, weakening build reproducibility.