chiiya/tmdb-php

Clear documentation, licensing, repository tests, and build tooling support adoption. Recent commit activity is absent, while every workflow action is unpinned and one high-confidence workflow audit finding affects the Dependabot merge workflow.

Latest 1.1.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded no commits and no active maintainers during the last 3 months. This is a meaningful maintenance concern, although the release history shows a release on May 29, 2026.

Repo issue activity

There are no new or closed issues in the last month and no merged pull requests, with 3 pull requests still open. This adds some uncertainty about current responsiveness.

Repo popularity

The repository has 7 stars and 1 fork, indicating a small user and contributor base. Popularity is supporting evidence only, but the limited external adoption reduces independent maintenance signals.

Security policy

No repository security policy was found. This is a transparency gap, though it does not by itself show that the package is unsafe to depend on.

Workflow audit

All 11 analyzed action references are unpinned, weakening build reproducibility. The Dependabot auto-merge workflow also has a high-confidence bot-conditions finding and top-level write permissions, although no untrusted checkout or script-injection sink was detected.