netcommons/m17n

The repository has tests and the release is stable, with organization backing and no install-time scripts. Workflow actions are all unpinned and one uses an archived action; the repository also lacks a security policy.

Latest 3.3.7.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 23 releases over more than 10 years, but it has had no release in nearly three years. That materially raises abandonment risk despite its historically established cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting maintenance has stopped or sharply slowed.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, while four issues remain open. This provides additional evidence of limited current maintenance.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it does not by itself indicate the package is unsafe.

Workflow audit

All 9 analyzed action references are unpinned, and a high-confidence medium-severity finding identifies an archived action. The workflows have no untrusted checkout or script-injection findings, which limits the risk to workflow hygiene rather than a severe exposure.