Package Health/php-soap-backports/engine

php-soap-backports/engine

The MIT license, focused dependency set, repository tests, and matching project make the package transparent and straightforward to integrate. Maintenance has stopped since February 2023, and all six workflow actions are unpinned, so future fixes and build integrity need extra scrutiny.

Latest v1.3.0

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 3 years and 8 months ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance for a library dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months. Combined with the last release being in February 2023, this indicates a currently inactive project.

Repo popularity

The repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these very low figures provide little evidence of a broad support community.

Security policy

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is less severe than evidence of active abandonment.

Workflow audit

All three workflows were analyzed with no audit findings or untrusted workflow sinks, but all six action references are unpinned. That leaves the build exposed to changing action contents over time.