phpinnacle/ridge

The repository has tests, a changelog, MIT licensing, and Psalm scanning, while its organization backing and clear package match add useful transparency. Workflow references are unpinned, so future builds have weaker reproducibility.

Latest 1.3.4

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 16 releases since January 2019, but none in the last 12 months and its latest release was over two years ago. This indicates materially slowed maintenance despite a previously established release history.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the latest release being over two years old. This raises the risk that defects or compatibility changes will not be addressed promptly.

Repo issue activity

There were no new or closed issues and no pull-request activity in the last month, with three issues remaining open. This supports the broader evidence of currently limited maintenance.

Security policy

The repository has no security policy, leaving the vulnerability-reporting process unclear. This is a transparency gap, but not a severe dependency risk on its own.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 7 action references are unpinned, which weakens build reproducibility and update control.