pheature/toggle-crud

Usable with caveats: the package is licensed, tested, documented, and backed by a matching organization repository, but it has had no registry release for over two years and no commits in the last three months. Install-time scripts are absent and the repository uses security tooling, reducing operational risk despite the aging maintenance record.

Latest 0.8.0

Packagist

64%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 10 releases over roughly five years with a median interval of about 43 days, but the latest release was over two years ago and there were no releases in the last 12 months. This materially lowers confidence in continued maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in November 2024, the current lack of recent development indicates slowed maintenance.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting guidance unclear. The presence of Dependabot and Psalm provides some compensation, but not a complete replacement for a documented reporting process.

Token permissions

All four workflows lack top-level token permission declarations, so their permissions are not explicitly minimized at workflow scope. No workflow requests top-level write access, which limits the severity of this hygiene gap.