Package Health/fond-of-oryx/customer-statistics-rest-api

fond-of-oryx/customer-statistics-rest-api

Tests, an MIT license, and organization backing provide a solid foundation. The limited release history and inactive recent commit window make long-term maintenance less certain, while workflow pinning remains weak.

Latest 2.0.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases have been published, with the latest on January 23, 2023 and none in the last 12 months. This is a meaningful maintenance concern, though the repository was pushed more recently.

Repo commit activity

There were no commits and no active maintainers in the three months measured. This weakens evidence of current maintenance, although the repository was not archived.

Repo tooling

Composer and Make are used for project tooling, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is partly offset by the small, tested package scope.

Workflow audit

The single workflow was fully analyzed with no dangerous findings or untrusted checkouts. However, all three action references are unpinned, weakening reproducibility and supply-chain hygiene.