astrotomic/php-deepface

The repository has tests, release notes for this version, a security policy, and a clear organizational owner. Its small release history and lack of commits in the last three months reduce confidence in ongoing maintenance, while workflow dependencies are not pinned.

Latest 0.5.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 7 releases over about 3 years, with only 1 release in the last 12 months and a median interval of about 89 days. This indicates a modest maintenance pace rather than abandonment, but it limits evidence of sustained activity.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. Although the repository was pushed recently and released in June, the absence of recent commits is a meaningful maintenance concern.

Repo issue activity

The repository has only 2 open issues and 1 open pull request, but no issues or pull requests were created or merged in the last month. This shows limited recent community activity without proving abandonment.

Version stability

Version 0.5.0 is not a stable major release, but it is not marked as a prerelease and recent prerelease share is 0%. The pre-1.0 versioning warrants some caution because compatibility may still change.

Workflow audit

Both workflows were fully audited with no untrusted checkouts, script injection, or audit findings. However, all 5 of 5 referenced actions are unpinned, leaving workflow builds exposed to changing action revisions.