ayacoo/video-validator

Clear documentation, repository tests, and a recent release provide useful support. The license mismatch, missing security policy, and entirely unpinned workflow actions reduce confidence despite read-only job permissions.

Latest 5.0.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

A GPL-2.0-or-later manifest declaration and license files are present, but the artifact license file was detected as GPL-3.0. The mismatch creates a real licensing ambiguity for consumers.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is concerning for maintenance capacity, although the recent release shows some publication activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, though it does not by itself indicate that the package is unsafe to depend on.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings. However, all 9 action references are unpinned, leaving workflow dependencies exposed to upstream changes.