firehed/inputobjects

The package includes tests, release notes, a clear repository match, and dependency scanning. Its small maintainer base and inactive development make long-term support uncertain, while unpinned workflow actions add a modest supply-chain hygiene concern.

Latest 3.3.1

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Maintainers

One registry maintainer is a thin publishing base, increasing continuity risk. The linked repository belongs to the same individual, so there is no provided organization backing to offset that risk.

Release history

The package has 16 releases over roughly 11 years, but none in the last 12 months and the latest registry release was in October 2021. This is a meaningful maintenance concern for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived and was pushed in July 2024, which softens the concern but does not show current development.

Repo issue activity

Six issues and six pull requests remain open, with no new or closed items in the last month. This supports the broader picture of limited recent project activity.

Workflow audit

All 10 analyzed action references are unpinned, which weakens build reproducibility and update safety. The audit found no dangerous triggers, untrusted checkouts, script injection, or higher-severity findings, so this remains a modest hygiene concern.