innmind/profiler

The package is well documented, licensed, and backed by an organization with a matching repository and release notes. Maintenance has slowed, while workflow references are unpinned and reusable workflows inherit secrets, leaving meaningful hygiene concerns.

Latest 5.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has existed since 2019 with 15 releases and one release in the last 12 months, showing continued publication but a relatively quiet recent cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That indicates currently quiet maintenance and raises abandonment risk, although the recent release and push provide some compensating evidence.

Repo issue activity

There is only one open issue and no new or closed issues or pull requests in the last month. This is limited evidence of current community activity, but not by itself a severe concern for a small package.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of malicious behavior.

Security policy

The repository has no security policy. For a package that profiles applications and handles environment, process, HTTP, and SQL data, the lack of a documented reporting path is a meaningful transparency gap.