Package Health/labor-digital/typo3-better-api-composer-plugin

labor-digital/typo3-better-api-composer-plugin

The package includes a README, changelog, matching source repository, and a clear Apache-2.0 license. Its repository has not been updated since May 2022, and all four workflow actions are unpinned, making this old release a maintenance liability.

Latest 4.1.0

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was published on May 6, 2022, with no releases in the last 12 months. More than four years without a release is strong evidence of stalled maintenance.

Repo issue activity

The repository has no open issues or pull requests and recorded no issue or pull-request activity in the last month. This is consistent with a dormant project, although it does not by itself prove abandonment.

Repository archived

The linked repository is not archived, which avoids an immediate abandonment indicator. However, its last push was on May 6, 2022, consistent with the stale release history.

Security policy

The linked repository has no security policy. For a small, old Composer plugin this is a transparency gap, though it is less significant than the lack of recent releases.

Workflow audit

Both workflows were analyzed successfully and have no untrusted checkouts, script injection, dangerous triggers, or audit findings. However, all four action references are unpinned, leaving the build exposed to dependency changes over time.