lamoda/metrics

Clear licensing, tests, documentation, and release notes make the package straightforward to evaluate and maintain in an application. The small repository and organization backing help offset the quiet recent development and limited workflow security hygiene.

Latest 3.0

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the three months before collection. The recent release partly offsets this, but the quiet interval still leaves some maintenance risk.

Repo issue activity

Two issues and one pull request remain open, with no issues or pull requests closed in the past month; this is a modest sign of limited current responsiveness.

Repo tooling

Composer build tooling is present, but no security scanning tool is configured, leaving a security-hygiene gap in the repository.

Security policy

The repository has no published security policy, making the process for reporting and handling vulnerabilities less transparent.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, so workflow supply-chain reproducibility is weaker.