mentalworks/phpword

The package is clearly licensed, documented, tested in its repository, and backed by an organization. Its workflows use 13 unpinned actions and the project has no security policy, adding hygiene concerns.

Latest v1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is the package's only release, published about 3 years and 7 months ago, with no releases in the last 12 months. That strongly increases abandonment and maintenance risk.

Repo issue activity

There were no new issues, closed issues, new pull requests, or merged pull requests in the last month, and no open pull requests. This supports the broader evidence of inactivity, though some issue counts are unknown.

Repository archived

The repository is not archived, which is positive, but it was last pushed about 3 years and 7 months ago. The inactive repository does not compensate for the absence of later releases.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a library that processes document formats.

Workflow audit

Both workflows were fully analyzed with no dangerous triggers, sinks, or audit findings. However, all 13 action references are unpinned, leaving avoidable build-integrity risk.