phpfiletool/filetool

Tests, release notes, licensing, and a clean workflow audit provide useful transparency. The small user base and limited security process leave less evidence of long-term support, so pin this version and monitor the repository.

Latest v2.0.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 2 releases across 932 days, with a median interval of about 785 days and just 1 release in the last 12 months. The recent v2.0.0 release is positive, but the overall cadence provides limited evidence of sustained maintenance.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a recent release was published, there is little current development activity to demonstrate ongoing support.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, indicating a very small adoption and feedback base. Low popularity is supporting evidence rather than a verdict, but it reduces confidence in community-driven maintenance.

Security policy

The repository has no security policy. This is a transparency and reporting gap, though it is partly offset by the available tests, static-analysis configuration, and documented release notes.

Workflow audit

The single workflow was fully analyzed with no unsafe triggers, untrusted checkouts, or audit findings. However, both of its 2 action references are unpinned, leaving a dependency-hygiene weakness.