hsldymq/whisper

Its focused codebase includes tests, a changelog, and a matching source repository. The small project has limited security and workflow safeguards, so pin this version and assess whether its older dependencies fit your application.

Latest v0.4.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 14 releases since March 2019, but none in the last 12 months and the latest registry release was in April 2022. This indicates a long period without published maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's extended release inactivity. The repository is not archived, but there is no recent activity to compensate.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a small package this is a meaningful transparency gap, though it does not by itself make the release unfit.

Security policy

The linked repository has no security policy. This weakens vulnerability-reporting transparency, with no provided project signal showing an alternative process.

Workflow audit

The single workflow was fully analyzed and has no detected dangerous sinks or audit findings, but all 4 action references are unpinned. The absence of a top-level permissions block is acceptable here, while unpinned actions leave avoidable build-integrity risk.