Package Health/obeikan-digital-solutions/phpnotification

obeikan-digital-solutions/phpnotification

The repository includes tests, a changelog, matching package files, and Dependabot, but its automation uses broad permissions and an unsafe bot check. Pin 2.4 only when its current behavior is acceptable, since ongoing maintenance is uncertain.

Latest 2.4

Packagist

54%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 776 days old with 10 releases but no releases in the last 12 months, indicating that maintenance may have stopped. The stable 2.4 release and documented release notes provide some transparency but do not offset the prolonged inactivity.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the risk that defects or compatibility issues may remain unaddressed.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. Dependabot and repository tooling provide limited compensation but do not replace a maintainer-facing policy.

Workflow audit

All 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. There are no untrusted checkouts or script-injection findings, so this is a meaningful hygiene and supply-chain caution rather than a severe verdict.