atk14/dictionary

It has a clear MIT license, focused dependency profile, tests, documentation, and organization backing. Maintenance is difficult to validate because only two releases span about seven years and there were no commits in the last three months; workflow references are also unpinned.

Latest v1.0.1

Packagist

67%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases across about seven years, although one release occurred in the last 12 months. This suggests a very slow release cadence but not clear abandonment by itself.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent release push partly offsets this, but ongoing maintenance capacity remains uncertain.

Repo tooling

The repository uses Composer for builds, but no security scanning tool was detected. For this small library that is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations unspecified.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, so their contents can change without a reviewed version.