fof/secure-https

Organization backing, a matching repository, and release notes provide useful transparency. The small dependency surface and lack of install-time scripts reduce adoption risk, but ongoing maintenance is not clearly demonstrated.

Latest 1.1.3

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was on November 12, 2023, with no releases in the last 12 months. That long pause lowers confidence in ongoing maintenance, although the package has a multi-year history and 10 releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, despite the recent repository push timestamp.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while nine pull requests remain open. That suggests limited visible maintenance activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and hygiene gap rather than a severe risk.

Workflow audit

All three workflows were analyzed successfully with no audit findings or untrusted checkout and script-injection sinks. However, all three action references are unpinned, leaving avoidable dependency-integrity risk.