andi-lab/graphql-php

The repository includes tests, release notes, security scanning, and readme documentation. Maintenance has stopped since February 2024, and all six workflow actions are unpinned, leaving this older release with meaningful upkeep and build-integrity concerns.

Latest 1.0.1

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, so there is no provided evidence of organizational backing to compensate for the single registry maintainer or inactive development.

Release history

Only two releases were published, with the latest on February 14, 2024 and no releases in the following 12 months. This indicates limited release continuity and raises abandonment risk.

Repo commit activity

There were no commits or active maintainers in the last three months, consistent with the long release gap and indicating currently inactive maintenance.

Security policy

The repository has no security policy, leaving users without a documented channel or process for reporting vulnerabilities.

Workflow audit

The workflow audit completed cleanly, uses read-only permissions, and found no dangerous sinks or high-confidence audit findings. However, all six action references are unpinned, so their versions can change without a repository change.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andrey N. Mokhov

Direct Dependencies

Dependency	Last Release	Score
spiral/core Version ^3.7	—	—
spiral/attributes Version ^3.1	—	—
webonyx/graphql-php Version ^15.4	—	—
phpdocumentor/reflection-docblock Version ^5.3	—	—