Package Health/holidayapi/holidayapi-php

holidayapi/holidayapi-php

The repository includes tests, release notes, a clear license, and organization backing. Workflow dependencies are unpinned and the project lacks a security policy, so pin this version and verify future maintenance before broad adoption.

Latest 5.0.0

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 10 releases since October 2019, but none in the last 12 months; the latest release was over a year ago. This indicates slowing maintenance despite an established release history.

Repo commit activity

There were no commits and no active maintainers in the past three months. Although the repository was recently pushed for the release, the current activity profile raises maintenance risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability reporting and handling procedures undocumented. Organization backing and a maintained release history partly offset this gap, but do not remove it.

Workflow audit

All three workflow action references are unpinned, which weakens build reproducibility. The single workflow was fully analyzed, has no untrusted checkout or script-injection findings, and does not use broad top-level write permissions.