chevere/iterator

The repository has tests, a clear license, security scanning, and a matching project, which support dependable use. Workflow dependencies are not pinned and one referenced action is archived, so maintenance hygiene needs attention.

Latest 1.0.0

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 2 years and 9 months ago, with no releases in the last 12 months. That limits evidence of sustained maintenance and makes adoption more dependent on the initial release quality.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months. Although it was pushed more recently than the package release, the current activity does not show ongoing development.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but security scanning is present as compensating project tooling.

Workflow audit

All 7 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The workflows had no untrusted checkout or script-injection findings, which limits the risk to build hygiene rather than a severe workflow threat.