blastcloud/hybrid

It has clear documentation, release notes, repository tests, and an MIT license, with no install-time scripts. The source project is identifiable and organized, but its automation and security documentation are basic.

Latest 2.1.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases since 2019 with a historical median interval of about 60 days, but the latest release was over two years ago and there were no releases in the last 12 months. This materially raises maintenance risk despite its established history.

Repo commit activity

The repository had no commits and no active maintainers in the three months measured. Combined with the long gap since the latest package release, this points to slowed maintenance.

Repo tooling

The project uses Composer build tooling but reports no security-scanning tools. For a small testing library this is a modest transparency and maintenance gap, not evidence of abandonment on its own.

Security policy

The repository has no published security policy. That weakens vulnerability-reporting transparency, although it is a secondary concern for this package's overall maintenance profile.

Workflow audit

All analyzed workflows completed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving a minor reproducibility and workflow-supply-chain hygiene gap.