firehed/input

The repository includes tests, release notes, and automated dependency scanning. Its workflows have no audit findings, but all 11 action references are unpinned and the project lacks a security policy.

Latest 2.3.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was in October 2021, with no releases in the last 12 months. That long release gap materially raises abandonment risk, despite the package having 15 releases over its history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. This supports the broader evidence of stalled maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 2 issues and 4 pull requests remain open. This indicates limited recent project engagement.

Security policy

The repository has no published security policy. That weakens disclosure transparency for a library intended to process application input.

Workflow audit

All 3 workflows were analyzed successfully with no reported audit findings or dangerous trigger sinks. However, all 11 action references are unpinned, leaving avoidable build-reproducibility and supply-chain hygiene risk.