Package Health/aws/aws-php-sns-message-validator

aws/aws-php-sns-message-validator

This is a mature, actively published AWS-owned package with over 11 years of history, a stable release, a current non-archived repository, matching package references, tests, licensing, and a small focused dependency footprint. The main concern is that the repository recorded no commits or active maintainers in the last 3 months, although a release was published recently and two pull requests were merged during the last month, which provides partial evidence of ongoing maintenance. CI has no detected dangerous workflow patterns and includes a security policy, but security scanning is absent and some workflow permission declarations are broad or omitted. Overall, the package appears suitable to depend on, with routine maintenance and CI-hygiene caveats.

Latest 1.10.2

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits and no active maintainers were recorded in the last 3 months, which is a meaningful maintenance concern. However, the recent release, recent repository push, and two merged pull requests partly compensate for the apparent short-term commit lull.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and preventive-hygiene gap, though it is not evidence that the package is unsafe.

Token permissions

Two workflows omit top-level permissions and one workflow declares top-level write access, while only one is explicitly read-only. This weakens least-privilege transparency and warrants CI-hygiene caution.