decodelabs/coercion

The package has clear licensing, documentation, repository ownership, and release notes for this version. Its workflow uses seven unpinned actions and the repository has no security policy, while recent release and commit activity is limited.

Latest v0.3.5

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 28 releases since March 2022 and historically released frequently, but it has had no registry release in the last 12 months. That weakens evidence of current release maintenance.

Repo commit activity

There were no commits and no active maintainers during the last three months, which weakens evidence of ongoing maintenance. The recent repository push shown by repository_archived partly offsets this concern but does not establish sustained activity.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanner is a maintenance and assurance gap, though it is not decisive by itself.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a hygiene gap, not evidence that the package is unsafe.

Version stability

Version v0.3.5 is not a prerelease, although the package remains below a stable major version. This is a modest maturity limitation rather than a severe concern.