fperezco/ratchetphp

Tests, release notes, and an MIT license make the package easy to inspect. Its workflow leaves all three actions unpinned and the repository has had no recent activity, so pinning this fork deserves care.

Latest 2.0.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was about 2 years and 6 months ago. Earlier releases provide some history, but the long pause lowers confidence in ongoing maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that has been inactive for an extended period. No provided activity signal compensates for that maintenance gap.

Repo tooling

The repository uses Composer and Make, but no security scanning tools were detected. This is a hygiene gap rather than evidence of unsafe code, and the project’s tests and security policy partly offset the concern.

Workflow audit

All 3 analyzed workflow action references are unpinned, which weakens build reproducibility and exposes CI to moving action changes. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Paco Perez

Chris Boden

Direct Dependencies

Dependency	Last Release	Score
react/socket Version ^1.0 \|\| ^0.8 \|\| ^0.7 \|\| ^0.6 \|\| ^0.5	—	—
guzzlehttp/psr7 Version ^1.7\|^2.0	—	—
ratchet/rfc6455 Version ^0.3.1	—	—
symfony/routing Version ^2.6\|^3.0\|^4.0\|^5.0\|^6.0	—	—
react/event-loop Version >=0.4	—	—