melhorenvio/auth-sdk-php

The package includes clear documentation, repository tests, release notes, and a matching organization-owned source repository. Its lack of security scanning and unpinned workflow actions add maintenance and build-integrity concerns.

Latest 1.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, with the latest in October 2022 and none in the last 12 months. This is a meaningful maintenance concern despite the package being mature and stable.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with a repository that has been inactive for more than three years. This materially increases the risk that issues and compatibility needs will go unaddressed.

Repo popularity

The repository has only 2 stars and 2 forks, offering little independent evidence of broad community adoption. Low popularity is supporting evidence rather than a decisive problem.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, partly offset by the repository's tests and CI workflow.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, leaving the build exposed to changes in those action versions.