duncan3dc/fork-helper

The project has a long history, stable versioning, clear documentation, tests in its repository, a matching license, and a very small runtime dependency surface. Its workflows lack pinned action references, and the repository has no security scanning or published security policy.

Latest 2.6.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is mature, with releases spanning more than 12 years, but only one release in the last 12 months and a median interval of about 139 days indicate a slower cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of active maintenance despite a recent push recorded elsewhere in the repository data.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest process and maintenance gap.

Security policy

No security policy was found in the repository, so users have less documented guidance for reporting and handling vulnerabilities.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of the two action references are unpinned, which is a workflow hygiene weakness.