astrogoat/goaffpro

The package has a clear README, license, release notes, repository tests, and organizational ownership. Its small dependency set and lack of install scripts reduce adoption friction, while pinning the workflow container would improve build reproducibility.

Latest 1.6.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has seven releases over about two years, but none in the last 12 months; this indicates a meaningful maintenance slowdown despite a previously regular cadence.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, reinforcing the concern raised by the lack of registry releases in the past year.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected; this is a minor transparency and maintenance gap rather than a severe risk.

Workflow audit

All three workflows use unpinned references, and the audit found a high-confidence unpinned container image; one workflow file also failed analysis, so build reproducibility and audit coverage are limited.