Package Health/keerill/php-java-optional

keerill/php-java-optional

Documentation and packaging are complete, and the runtime dependency footprint is minimal. Automation hygiene is weaker than the release structure, despite Dependabot coverage.

Latest v1.0.2

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in December 2023, with no releases in the last 12 months and only three releases overall. This materially raises maintenance and abandonment risk for a dependency assessed in 2026.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.

Security policy

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, although Dependabot-based security scanning provides some compensating hygiene.

Workflow audit

All six analyzed action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the Dependabot auto-merge workflow. The audit was complete, and no untrusted checkout or script-injection sink was found.