phayne-io/php-user-agent

It has a license, tests, Composer tooling, and organization-backed ownership. The single release and no commits for 16 months make ongoing maintenance uncertain, while all four workflow actions are unpinned.

Latest 1.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has made only one release, with no releases in the last 12 months. That leaves little evidence of sustained maintenance for a library released 16 months ago.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. With only one release, the lack of recent development raises abandonment risk.

Security policy

The linked repository has no security policy. This is a modest transparency gap, although the repository does use Psalm security scanning.

Workflow audit

The workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 of 4 action references are unpinned. This is a workflow hygiene weakness rather than a severe risk on its own.