kba-team/version

The package is small and focused, with MIT licensing, repository tests, and an organization-owned source project. No commits have landed since May 2024, while the repository lacks a security policy and all eight workflow action references are unpinned.

Latest v2.0.2

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only six releases since February 2019 and none in the last 12 months; the latest release was published in May 2024. This indicates a slow and currently inactive release cadence, despite the package's long history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no release activity since May 2024. The project is not archived, but current maintenance capacity is unclear.

Repo tooling

Composer is used for the build, which is appropriate, but no security-scanning tools were detected. That leaves dependency and code-security checks less visible.

Security policy

The repository has no security policy. This is a transparency and maintenance gap, although the package is small and no other provided signal shows an active security process.

Workflow audit

The single workflow was fully analyzed with no trigger or sink findings, but all eight action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene without making the package unfit on their own.