outpipe/outpipe-php

The project has strong documentation, tests, a license, security tooling, and recent development. Its single-contributor history, entirely unpinned workflow actions, and very early release stage leave meaningful maintenance and build risks.

Latest v0.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's first release, published less than one day ago, so there is no established release track record or demonstrated long-term maintenance.

Repo bus factor

One contributor made all 145 recent commits, leaving maintenance highly concentrated. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo package mention

The repository name does not match this package and its README does not mention the package, so the link does not clearly establish that this PHP package is maintained from that source repository.

Version stability

Version 0.1.0 is an early non-stable-major release, which signals a young API and greater potential for breaking changes.

Workflow audit

All 51 action references are unpinned, and one workflow grants top-level write access, creating build reproducibility and permission-hygiene concerns. The reported cache-poisoning findings are low-confidence hygiene observations, while no untrusted checkout or script-injection path was found.