multiplechain/tron

The package includes tests, release notes, and a clear MIT license, with an organization-backed repository that is still active rather than archived. Its small release history, nearly two years without commits, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.

Latest 0.1.2

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases and none in the last 12 months; its latest release was nearly two years ago. This is a meaningful sign of limited ongoing maintenance, though the release intervals were previously regular.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since the latest release. The project is not archived, but current maintenance capacity is not demonstrated.

Security policy

The linked repository has no security policy, reducing transparency about vulnerability reporting and response. This is a maintenance and disclosure gap, not evidence that the package is unsafe.

Workflow audit

All 3 analyzed action references are unpinned, which weakens build reproducibility and exposes CI to moving dependencies. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, limiting this to a hygiene concern.