gimucco/bluesky-php

Clear documentation, tests, release notes, and licensing improve confidence. The small dependency footprint and read-only workflow permissions also reduce practical exposure, but this remains an early package.

Latest v0.2.2

Packagist

67%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has four releases, all clustered within roughly 20 minutes, with no later release across the following 139 days. That shows initial activity but not an established release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, despite the latest release having been published about 139 days earlier. This is the strongest abandonment concern in the assessment.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap that matters for a library handling authentication-related integrations, though it is not evidence of unsafe code by itself.

Version stability

v0.2.2 is a stable, non-prerelease version, but the package has not reached a stable major version. That is a modest maturity concern rather than a severe adoption blocker.

Workflow audit

All three workflows were analyzed successfully and use read-only permissions, with no injection or high-confidence audit findings. However, all eight analyzed action references are unpinned, leaving builds exposed to mutable upstream action changes.