lia/lia_hyphenator

The package includes tests, documentation, and a clear license, with regular releases and organizational ownership. A security policy is absent, workflow actions are unpinned, and recent commits come from one contributor, limiting maintenance assurance.

Latest 1.2.3

Packagist

74%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made 100% of the single recent commit. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

Only one commit was recorded in the last three months, so recent maintenance activity is thin despite the recent release history.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a modest project-hygiene gap.

Security policy

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow audit

The workflow audit completed cleanly, uses read-only permissions, and found no high-confidence dangerous findings. However, both analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.