b13/http2

The repository remains active enough to publish a recent release, with tests and release notes available. All five workflow actions are unpinned, and the publish workflow has a high-confidence template-injection finding; no commits or issue activity were recorded in the last three months.

Latest 4.1.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits and no active maintainers were recorded in the last three months. A recent release partly offsets this, but the lack of underlying development activity is a maintenance concern.

Repo issue activity

There were no new or closed issues or pull requests in the last month, despite 10 open issues and 2 open pull requests, indicating limited recent project interaction.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All five analyzed action references are unpinned, and the publish workflow has a high-confidence template-injection finding. The finding is not paired with an untrusted trigger or checkout, so this is workflow hygiene and supply-chain caution, not a standalone severe risk.