kornrunner/blurhash

The repository has a clear README, tests, MIT licensing, and a small dependency surface. GitHub workflow references are all unpinned, and the project has no security policy or recent commit activity despite a recent repository push.

Latest v1.2.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in more than three years, with zero releases in the last 12 months; this raises maintenance and compatibility concerns.

Repo commit activity

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing development even though the repository has a recent push timestamp.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no published security policy, so the process for reporting and handling vulnerabilities is unclear.

Workflow audit

Both workflows were analyzed without dangerous triggers or audit findings, but all 8 action references are unpinned; this is a reproducibility and supply-chain hygiene concern rather than a severe risk.