Package Health/laminas/laminas-dependency-plugin

laminas/laminas-dependency-plugin

The project is clearly documented and backed by an organization, with repository tests and a security policy. Maintenance is limited to security fixes, with no releases or commits in the last 12 months; workflow dependencies are also unpinned.

Latest 2.7.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, despite a 32-day median release interval across its history. This supports the stated security-only maintenance posture and lowers confidence in ongoing feature work.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is consistent with security-only maintenance but still indicates little capacity for regular fixes or improvements.

Repo issue activity

There were no newly opened or closed issues or pull requests in the last month, while six pull requests remain open. This suggests limited current project throughput.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The security policy partly compensates through documented reporting guidance, but automated coverage is not evident.

Workflow audit

All three workflows were analyzed without audit findings or untrusted-code sinks, but all three action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns rather than a severe risk because no dangerous trigger or sink was detected.