matephp/dto

The package is licensed, documented, and backed by repository tests, release notes, security scanning, and minimal runtime dependencies. Maintenance has been quiet for three months, while all six workflow actions are unpinned and no security policy is provided.

Latest 2.0.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release history provides some countervailing evidence.

Repo popularity

The repository has zero stars, forks, and watchers, so there is little visible community adoption or external validation. Popularity is supporting evidence only and does not outweigh the package's other healthy signals.

Security policy

No repository security policy is provided, leaving vulnerability-reporting guidance unclear. This is a modest transparency gap rather than a direct dependency risk.

Workflow audit

The single workflow was fully analyzed, has read-only permissions, and has no detected dangerous sinks or audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.