makowskid/dcfparser

The release includes a clear README, matching MIT licensing, repository tests, and a stable major version. The workflow leaves all six actions unpinned and the project has no security policy, while recent maintenance evidence is limited to the release itself.

Latest 2.0.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases over roughly six years, with a gap of about six years between releases. The recent 2.0.0 release is positive, but the sparse history limits evidence of sustained maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the preceding three months. The matching recent release provides some compensating evidence, but ongoing development activity remains unproven.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. This does not show a vulnerability, but it leaves the process for reporting and handling security issues undocumented.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene weakness.