pheature/inmemory-toggle

The package is licensed, tested, documented, and backed by an organization, with Dependabot and Psalm configured. Maintenance appears paused, and all 13 workflow action references are unpinned, leaving future fixes and build reproducibility uncertain.

Latest 0.8.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases since June 2021, but none in the last 12 months; its latest release was in December 2023, nearly three years ago. This materially raises abandonment and compatibility risk.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this points to paused maintenance rather than an actively evolving project.

Security policy

The repository has no published security policy. This is a transparency gap for reporting vulnerabilities, although it does not by itself show that the code is unsafe.

Version stability

Version 0.8.0 is a normal, non-prerelease release, but it remains below a stable major version, so compatibility guarantees are weaker than for a 1.x package.

Workflow audit

All four workflows were analyzed with no trigger, injection, permission, or audit findings, but all 13 action references are unpinned. That weakens build reproducibility and update control without indicating an immediate severe risk.