Package Health/fond-of-oryx/product-lists-rest-api

fond-of-oryx/product-lists-rest-api

Tests, an organization-owned repository, and a matching source tree provide useful project support. The workflow uses three unpinned actions and the repository has no security policy, so pinning this version and reviewing its build setup is sensible.

Latest 2.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published on January 23, 2023 and none in the last 12 months; this is a substantial maintenance concern, although the repository was pushed more recently.

Repo commit activity

There were no commits and no active maintainers in the last three months, indicating limited recent development; the repository's January 2025 push prevents this from being treated as complete abandonment.

Repo tooling

The repository uses Make and Composer for builds, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a minor transparency gap for a package intended for API integration.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update safety.