yard/brave-acf

This is a healthy, actively maintained release with a clear MIT license, repository-backed source, tests, CI workflows, dependency scanning, and a stable v2.0.0 release profile. The package is still relatively young and has modest activity and no observed community popularity, while the repository lacks a security policy and explicit top-level GitHub Actions permissions; these are real hygiene gaps but are outweighed by recent publishing, a non-archived organization-owned repository, two active contributors with balanced commit share, and six merged pull requests in the last month.

Latest v2.0.0

Packagist

82%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is young at 177 days with five releases, including a release within minutes of collection and a median interval of about 30 days; this shows ongoing delivery but limited long-term history.

Repo popularity

The repository has zero stars, forks, and watchers, which provides no external adoption evidence; this is a caution for maturity assessment but is not decisive for a small, organization-owned package.

Security policy

No repository security policy was found, leaving vulnerability reporting and response guidance undocumented.

Token permissions

All four workflows lack top-level permissions declarations. Although none grants top-level write access, explicitly declaring least-privilege permissions would improve CI security hygiene.