abxy/tripwire-server

The package includes a usable README, tests, release notes, and matching MIT licensing. Confirm the repository/package identity before adopting, and account for the pre-1.0 API while workflow hardening catches up.

Latest 0.3.0

Packagist

68%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo package mention

The linked repository name does not match the package name and its README does not mention this package, so the package-to-source relationship is not transparent and may indicate repository piggy-backing.

Repo popularity

The repository has one star and no forks or watchers; this is weak supporting evidence, though low popularity alone does not indicate abandonment given the recent commit and release activity.

Security policy

No repository security policy was found, leaving reporting and vulnerability-handling expectations undocumented.

Version stability

Version 0.3.0 is not a prerelease, but the pre-1.0 major version signals that API or behavior changes may still occur.

Workflow audit

Both workflows use read-only permissions and the audit completed cleanly with no untrusted checkout or injection findings, but all 10 analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

ABXY Labs

Direct Dependencies

Dependency	Last Release	Score
nyholm/psr7 Version ^1.8	—	—
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.1	—	—
psr/http-message Version ^1.1 \|\| ^2.0	—	—
guzzlehttp/guzzle Version ^7.9	—	—