chromatic/orange-dam-php

The package includes tests, a changelog, release notes, a matching repository, and an Apache-2.0 license. Missing security-policy documentation and six unpinned workflow actions reduce transparency and build reproducibility.

Latest v2.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 10 releases since June 2023, but none in the last 12 months and its latest registry release was nearly two years ago. This indicates a meaningful maintenance slowdown, although the repository was pushed recently.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance despite the repository not being archived.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while five issues and four pull requests remain open. This suggests limited recent project response.

Security policy

The linked repository has no security policy. For an API client, this is a transparency gap, though the package otherwise has clear source, tests, and release documentation.

Workflow audit

Both workflows were analyzed successfully with no audit findings or untrusted checkouts, and one workflow uses read-only permissions. However, all six analyzed action references are unpinned, reducing build reproducibility; the pull_request_target trigger has no accompanying sink.