muhanz/shoapi

The package has clear documentation, MIT licensing, and a small runtime dependency surface. Its workflow uses read-only permissions, but it has no security scanning and leaves both action references unpinned. Pin v1.0.1 only if you can accept maintaining an apparently inactive integration yourself.

Latest v1.0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, and there have been no releases in the last 12 months; the latest release was about 2 years and 11 months ago, indicating very limited maintenance activity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for nearly three years.

Maintainers

One registry maintainer is consistent with an individually owned project, but it leaves little visible publishing redundancy.

Project backing

The repository is owned by an individual account rather than an organization, so there is no indicated organizational backing to offset the single-maintainer and inactivity concerns.

Repo issue activity

There is one open issue and no recent issue or pull-request activity, offering no evidence of active project support.