kiwilan/php-ebook

The repository has tests, a detailed README, a changelog, release notes, and active security tooling. Maintenance has slowed, while all 19 workflow actions are unpinned and a high-confidence bot-condition finding needs attention.

Latest 3.0.09

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 81 releases since April 2023, but none in the last 12 months; this is a meaningful maintenance slowdown despite its previously active release history.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent repository push and extensive historical release activity provide some context, but do not remove the current maintenance concern.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with four open issues and four open pull requests; this suggests limited current project interaction.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, not evidence of unsafe code.

Workflow audit

All 19 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target workflow has no untrusted checkout or script-injection findings, so the workflow posture is a caution rather than a severe risk.