dealnews/slack

This is a usable, transparently packaged PHP library with a stable release, four releases over the past 305 days, an active non-archived organization-owned repository, tests, a matching source repository, modest dependencies, and no install-time scripts or dangerous workflow patterns. The main concern is maintenance continuity: the repository recorded zero commits and zero active maintainers in the last three months, despite a recent release, while popularity is negligible and the repository lacks a security policy and explicit workflow token permissions. Overall, it is reasonable to depend on with normal monitoring, but it does not yet demonstrate strong ongoing maintenance or security-process maturity.

Latest 2.0.3Packagist

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a meaningful maintenance-continuity concern despite the recent release and push timestamp.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these values provide little external validation or maintenance signal.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented and reducing security-process transparency.

Token permissionscaution

The one workflow has no top-level token permissions declaration. No write permissions were observed, but the missing explicit restriction is a workflow-hygiene gap.

View all 18 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
guzzlehttp/guzzle Version ^7.15.2 || ^8.1	—	—