datingvip/imagine

The package has clear licensing, documentation, tests, and a matching organizational repository. Recent maintenance is quiet, and its six workflow actions are all unpinned; the absent security policy adds a smaller transparency gap.

Latest 1.2.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There have been 32 releases since January 2022, but only one release in the last 12 months and the latest was about nine months ago, indicating a slower current cadence.

Repo commit activity

The repository had no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the package did receive a release within the last year.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest repository hygiene gap.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency but is not evidence that the package is unsafe by itself.

Workflow audit

Both workflows were analyzed successfully and contain no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.