beberlei/assert

Its long release history, tests, changelog, and focused dependency set support dependable use. Recent repository activity is quiet, and workflow references are unpinned; the missing security policy adds a smaller transparency concern.

Latest v3.3.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful sign of currently quiet maintenance, partly offset by the recent v3.3.4 release.

Repo issue activity

There are 30 open issues and 19 open pull requests, but no issues or pull requests were opened or merged in the last month. The backlog and lack of recent collaboration are a maintenance caution.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. The absence of scanning lowers supply-chain transparency somewhat, though it is not evidence of a defect by itself.

Security policy

No repository security policy was found. That leaves vulnerability reporting and response expectations unclear, creating a modest transparency concern.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.