nguyenanhung/text-helper

The package is small and clearly identified, with a matching repository, MIT licensing, and a focused dependency set. Its last release and commit activity were about two years ago, while the workflow uses three unpinned actions; pin a maintained version if ongoing updates matter.

Latest v2.0.9

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about two years ago, and there were no releases in the preceding 12 months of the collected history. This lowers confidence in ongoing maintenance, despite the package having 20 releases overall.

Repo commit activity

The repository had no commits and no active maintainers in the last three months. Together with the release gap, this is a meaningful abandonment concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting expectations unclear.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.