itosho/easy-query

The package includes tests, release notes for this version, a clear MIT license, and a small dependency surface. Its workflow has unpinned actions and high-confidence secrets inheritance findings, while the repository has no security policy.

Latest v3.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over 2 years ago, and there were no releases in the last 12 months. The package has a long history and nine releases, but current maintenance appears paused.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this is meaningful evidence of paused maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This weakens project transparency but is not an abandonment verdict by itself.

Workflow audit

The only workflow was fully analyzed and uses read-only permissions, but both action references are unpinned and two high-confidence medium-severity secrets-inherit findings were reported. These are workflow hygiene risks, not a standalone dependency blocker.