infection/mutator

The package is a small, focused interface with a clear README, a matching repository, and a documented release. Its organization-backed project remains licensed and non-archived, but adoption carries some maintenance uncertainty.

Latest 0.4.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has four releases since May 2024, but none in the last 12 months and the latest release was April 29, 2025. This indicates materially slowed maintenance for a dependency, despite the documented 0.4.1 release.

Repo commit activity

There were no commits and no active maintainers in the preceding three months. Combined with no registry releases in the last year, this is a meaningful maintenance concern, though the package's narrow interface may require few changes.

Repo tooling

The repository uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. For this small interface package that is a minor transparency gap rather than a severe risk.

Security policy

No repository security policy was found. This modestly reduces disclosure transparency, but the package is a small interface with no evidence here of active security incidents.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, and the workflow has no top-level permissions block, leaving a minor reproducibility and least-privilege gap.