avalontechsv/idsv

The project is small but clearly structured, with tests, documentation, a license, and a release published recently. Its long release gap, no commits in the last three months, missing security policy, and unpinned workflow actions warrant caution for long-term adoption.

Latest v1.1.0

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases across about three years and eight months, with one release in the last 12 months. This suggests a slow maintenance cadence, although the current release is recent.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. A recent release and merged pull request provide some compensating evidence, but ongoing maintenance capacity remains uncertain.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small validation library this is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations undocumented.

Workflow audit

The workflow uses read-only permissions and the audit completed cleanly with no reported findings or untrusted checkout paths. However, both analyzed action references are unpinned, leaving avoidable workflow supply-chain exposure.