gravatarphp/gravatar

Documentation, licensing, and a focused dependency profile make adoption straightforward. Maintenance has been quiet since the last registry release, and all four workflow actions are unpinned; the missing security policy adds a smaller transparency concern.

Latest v2.0.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases and none in the last 12 months; its latest release was in January 2019, indicating a long period without registry updates.

Repo commit activity

There were no commits and no active maintainers in the measured three-month period, supporting the concern that development has largely stalled.

Repo tooling

The project uses Composer, but no security scanning tools were detected, leaving a modest gap in ongoing repository hygiene.

Security policy

The repository has no security policy, so users lack a documented reporting path; this is a transparency gap, but not a severe dependency risk for this small library.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.