aws/aws-crt-php

Documentation, licensing, and ownership are clear. The package has had no registry release in nearly two years, with only one repository commit in the past three months from one contributor; all 20 workflow actions are unpinned.

Latest v1.2.7

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The latest release was on October 18, 2024, with no releases in the last 12 months. This indicates a meaningful maintenance slowdown, though the package has 14 releases across its history.

Repo bus factor

All recent commits came from one contributor, giving the project a concentrated short-term commit base. Organization backing provides some capacity to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activity

Only one commit was recorded in the past three months, with one active maintainer. This is weak recent development activity, even though the repository itself remains available.

Repo tooling

The project uses make, Composer, and CMake, but no security scanning tools were detected. The missing scanning is a hygiene gap, partially offset by the documented build tooling.

Workflow audit

All seven workflows were analyzed successfully, with no untrusted checkout, script injection, or audit findings. However, all 20 action references are unpinned, reducing build reproducibility and leaving action updates uncontrolled.