bgli100/c-pchart

Documentation, tests, release notes, and a clear license make the package easier to adopt. Its workflow leaves three action references unpinned, so build hygiene deserves attention.

Latest v3.0.18

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 35 releases but none in the last 12 months; its latest release was about 18 months ago. This indicates a meaningful maintenance slowdown, although the project has an established release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of registry releases in the last year, this materially raises abandonment risk.

Repo issue activity

There were no new or merged pull requests and no issue activity in the last month. This provides no evidence of ongoing maintenance and reinforces the recent inactivity concern.

Security policy

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, but it is not by itself evidence that the package is unsafe.

Workflow audit

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.