erikwang2013/season

The package includes a substantial README, tests, release notes, and a small runtime dependency set. Maintenance is concentrated in one person, while workflows use broad permissions and unpinned actions. It is neither deprecated nor archived.

Latest 2.0.4

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account, matching the registry namespace. This confirms direct ownership but provides no organizational maintainer redundancy.

Repo bus factor

One contributor made 100% of the 8 commits in the last 3 months. Because the repository owner is an individual rather than an organization, this is a meaningful continuity concern.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. For a small PHP library this is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate poor maintenance.

Workflow audit

Both workflows were fully audited with no reported findings or untrusted-code sinks. However, all 3 action references are unpinned and one workflow grants top-level write permissions, creating avoidable workflow hygiene risk.