brainbits/period

It has a clear MIT license, tests, release notes for this version, and organization backing. The small dependency set and Dependabot are helpful, but the lack of a security policy leaves less guidance for incident handling.

Latest 3.0.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over 8 years with 15 releases, but only one release in the last 12 months suggests a slow maintenance cadence. The recent 3.0.6 release and release notes provide some compensating evidence.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern. The recent release and repository push provide limited evidence that the project is not abandoned.

Security policy

No security policy was found, leaving consumers without a documented process for reporting vulnerabilities or understanding security response expectations.

Workflow audit

All three workflows were analyzed with no dangerous sinks or audit findings, but all 9 action references are unpinned, weakening build reproducibility and update integrity. The absence of top-level permissions is acceptable on its own.