Package Health/alrayyes/forge-dashboard-sdk-php

alrayyes/forge-dashboard-sdk-php

The project has clear documentation, tests, release notes, and recent work from two contributors. Fix the high-confidence Dependabot workflow condition before granting its automation broad write access.

Latest v0.1.2

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the single registry maintainer and concentrated ownership provide less institutional handoff capacity.

Release history

The package is brand new, with its first release only 0 days ago and three releases overall, so long-term maintenance is not yet established.

Repo bus factor

The top contributor made about 71% of recent commits, but a second contributor supplied the remaining 29%, partially reducing concentration risk.

Version stability

Version v0.1.2 is a non-stable pre-1.0 release, which signals that compatibility and API maturity may still change.

Workflow audit

All six workflows were analyzed and all 25 action references are pinned, with no untrusted checkouts or script injection; however, a high-confidence bot-conditions finding and top-level write permissions in five workflows are genuine automation hygiene risks.