Package Health/nxtlvlsoftware/static-constructors

nxtlvlsoftware/static-constructors

The MIT license, focused dependency set, and substantial tests and documentation make the release straightforward to evaluate. Unpinned workflow actions and no repository security policy add maintenance and build-hygiene concerns.

Latest 1.0.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published over three years ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance despite the stable 1.0.0 version.

Repo commit activity

There were no commits and no active maintainers in the preceding three months. For a package whose only release is already over three years old, this is meaningful evidence of stalled maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool is configured. That is a repository hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

The audit covered both workflows with no untrusted checkout or script-injection findings, but all 23 action references are unpinned and one workflow grants top-level write access. These are build-hygiene concerns, not severe risks on their own.