codezero/browser-locale

The repository has tests, a clear README, a license, and a security policy. Its small scope and stable major release help, but the long period without commits or releases and unpinned workflow actions reduce confidence in ongoing maintenance.

Latest 3.4.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 9 releases since December 2015, but none in the 12 months before collection; the latest release was about two and a half years earlier. This suggests maintenance has slowed substantially, though the release history is established.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with activity having stopped around March 2024. This is the strongest abandonment concern.

Repo issue activity

There are no open issues and only one open pull request, with no issue or pull-request activity in the last month. This provides little evidence of active support.

Repo tooling

Composer is used for the build, but no security scanning tools were detected. For a small library this is a modest transparency gap, not a severe risk.

Workflow audit

The sole workflow was fully analyzed with no injection sinks or high-confidence audit findings, but all 4 action references are unpinned. Missing a top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.