nikic/iter

The stable API, clear README, tests, and release notes support adoption. Recent repository and registry activity is sparse, and workflow dependencies are unpinned, so maintenance and build-reproducibility risks remain.

Latest v2.4.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Health Score Breakdown

Release history

The package has existed since January 2014 with 13 releases, but it has had no registry release in the last 12 months and the latest release was in June 2024. This lowers confidence in ongoing maintenance despite its long history.

Repo commit activity

There were no commits and no active maintainers in the three months measured. This is a meaningful maintenance warning, although the repository was pushed in August 2025 and the package is mature.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 9 issues and 7 pull requests remain open. This suggests limited recent project responsiveness.

Repo tooling

Composer is used for the build, but no security-scanning tool was detected. That is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Workflow audit

The single workflow was fully analyzed with no injection or high-severity findings, but all 3 action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own, while unpinned actions weaken build reproducibility.