digitickets/lalit

The workflow leaves all four actions unpinned, and the repository has no security policy or security scanning. Long project history, a release three months ago, complete documentation, and an unarchived organization-owned repository provide meaningful support.

Latest 4.0.0

Packagist

76%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers during the last 3 months. The recent release and push provide some compensation, but the short-term development pause still raises maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For a library that processes XML, the absence reduces clarity about how vulnerabilities are reported and handled.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 4 action references are unpinned. That leaves the build exposed to action changes and warrants a hygiene caution.