petrknap/singleton

Its license, release notes, repository tests, and minimal runtime dependencies make the package easy to inspect. No commits were made in the last three months, all three workflow actions are unpinned, and the repository has no security policy.

Latest v2.0.2

Packagist

69%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases, but none in the last 12 months and the latest release was about 17 months ago. That suggests slowing maintenance, although the package may be stable and the repository remains available.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. For a small library this may reflect stability, but it provides limited evidence of ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policy

The repository has no security policy. For a small, simple library this is a limited documentation gap, but it leaves vulnerability-reporting expectations unclear.

Workflow audit

All three workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and workflow supply-chain hygiene.