Package Health/arslanramay/php-pkg-unit-conversion

arslanramay/php-pkg-unit-conversion

The repository includes tests, a security policy, and a minimal runtime dependency set. Workflow image pinning is weak, and the small project footprint offers little evidence of ongoing support.

Latest 1.0.0

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health checks

Release history

This package has only one release, published nearly six years ago, with no releases in the last 12 months. That is strong evidence of an inactive project, despite the stable 1.0.0 version.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the nearly six-year gap since its only release. No provided activity signal compensates for this inactivity.

Package scaffolding

The artifact has a README, changelog, and release notes, and the repository has tests; however, the README still contains package-skeleton placeholder text and an example unrelated to unit conversion, reducing transparency for consumers.

Workflow audit

All eight analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in the PHP CS Fixer workflow. The workflows have no top-level permissions block, but they also show no untrusted triggers or checkout sinks.