amplify/ticket

Documentation is thin, and the project has had no commits in the last three months. Release notes and organization backing provide some reassurance, but ongoing maintenance is not yet demonstrated.

Latest 1.0.2

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog, which limits consumer guidance; however, release notes for this exact version document the change and the repository has GitHub releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the short release history, this is a meaningful maintenance concern.

Repo tooling

Composer is used for builds, but no security scanning tool was detected. The missing scanning is a modest project-control gap rather than evidence of abandonment.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance unclear.

Workflow audit

The single workflow was fully analyzed and has a high-confidence template-injection finding, but there are no untrusted checkout or script-injection triggers and no broad top-level write permissions. This remains a workflow-hygiene concern rather than a severe standalone risk.