php-mcp/schema

The package is small and focused, with no runtime library dependencies and clear release notes. Its organization backing and unarchived repository help, but the long inactivity makes future fixes uncertain.

Latest 1.0.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases and none in the last 12 months; its latest release was over a year ago. This limits evidence of ongoing maintenance for a protocol schema that may need updates.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the absence of releases over the last year, this is meaningful evidence of slowed maintenance.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene concern, not evidence that the release is unsafe.

Security policy

The repository has no security policy. For a protocol schema package this is a minor transparency gap, though it does not by itself indicate abandonment.

Workflow audit

The single workflow analyzed successfully and has no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned and the workflow grants top-level write permissions, creating avoidable workflow-supply-chain and privilege concerns.