dhank77/qris-dinamis

Documentation and packaging are strong, with repository tests and a clear MIT license. The project is brand new, so maintenance durability is not yet demonstrated; pin this version until follow-up releases establish a track record.

Latest v1.0.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release and is 0 days old, so there is no release history showing sustained maintenance or response to defects.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, but the package itself is 0 days old, so this currently shows limited history rather than established abandonment.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe dependency risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. Both action references are unpinned, which is a supply-chain hygiene weakness, while the lack of a top-level permissions block is not harmful on its own.