ez-php/i18n

The repository includes tests, a changelog, and security scanning, while the package has no install-time scripts. All eight workflow actions are unpinned, making CI supply-chain changes harder to control.

Latest 2.5.4

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor accounts for 100% of the 67 recent commits. Organization ownership provides some backing, but no second active contributor is shown to share maintenance responsibility.

Repo commit activity

The repository recorded 67 commits in the last 3 months, but all came from one active maintainer. Activity is strong, while maintenance continuity remains dependent on one person.

Security policy

The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though it is less severe than evidence of abandoned maintenance or unsafe release behavior.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings, and it scopes permissions at job level. However, all 8 action references are unpinned, so their dependencies can change without a commit to this repository.