mkaverin/unhasher

The repository does include tests and a complete source tree, but it lacks a license and has no release activity for over four years. Its workflows use seven unpinned references, including an unpinned container and an archived action, increasing maintenance and build-integrity concerns.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published over four years ago, with no releases in the last 12 months. That strongly limits evidence of continued maintenance.

Repo commit activity

There were no commits or active maintainers in the last three months, consistent with the package's long release gap and indicating weak current maintenance.

Workflow audit

All three workflows were analyzed without incomplete files or dangerous untrusted triggers, but all seven action references are unpinned; the audit also found a high-confidence unpinned container and a high-confidence archived action.

License

No license declaration, license file, or repository license file was detected, leaving the terms for using and redistributing this package unclear.

Package scaffolding

The published artifact has no README, but the repository does contain tests, which provides some compensating evidence for project quality. The missing artifact README remains a minor documentation gap for a Composer library.