orisai/data-sources

The repository includes tests, a changelog, security policy, and focused dependencies. Workflow permissions are broader than necessary and action references are unpinned, increasing maintenance risk despite the project’s organization backing.

Latest 1.0.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has four releases over about three years, but none in the last 12 months; the latest release was about 21 months ago. This suggests slowing maintenance, though the stable release history is not evidence of abandonment by itself.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and indicating reduced maintenance activity.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a quiet, stable library but provides little evidence of active support.

Workflow audit

All three workflows were analyzed with no audit findings or untrusted checkouts, but two workflows grant top-level write permissions and all 25 action references are unpinned. These are meaningful CI hygiene weaknesses, though not severe on their own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marek Bartoš

Direct Dependencies

Dependency	Last Release	Score
nette/utils Version ^3.0.0\|^4.0.0	—	—
orisai/utils Version ^1.0.0	—	—
orisai/exceptions Version ^1.1.0	—	—
symfony/polyfill-php80 Version ^1.20.0	—	—