irazasyed/docgen

Clear documentation, licensing, tests, and security reporting make the project straightforward to evaluate. The long release gap and weak workflow controls leave maintenance and publishing practices needing caution.

Latest 0.2.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, all within about two days in March 2023, with no release in over three years. That materially raises abandonment risk despite the repository being pushed more recently.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. This indicates currently limited development activity, even though the repository is not archived.

Workflow audit

All 12 analyzed action references are unpinned, three workflows grant top-level write access, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. No untrusted checkout or script-injection sink was found, so this is a meaningful hygiene and automation risk rather than a standalone disqualifier.