Package Health/common-gateway/pet-store-bundle

common-gateway/pet-store-bundle

The package has useful documentation, organizational backing, and no install-time scripts. Its small dependency set is helpful, but the lack of recent maintenance and weak workflow security hygiene make adopting this release a liability.

Latest 0.0.85

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 85 releases, but none in the last 12 months; its latest release was in March 2024, indicating prolonged release inactivity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the abandonment risk despite the repository not being archived.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected, which weakens ongoing supply-chain hygiene alongside the workflow findings.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; no provided signal compensates for this gap.

Workflow audit

All 24 analyzed action references are unpinned, one workflow has top-level write permissions, and a high-confidence medium-severity archived action plus high-confidence ad hoc package installs were found.