phpolar/storage-driver

The source repository has tests, a changelog, dependency scanning, and a recent push despite no registry release in over a year. Workflow permissions and inherited secrets need tightening, while the package itself has a small, focused dependency surface.

Latest 1.0.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases over roughly three years, but there have been no registry releases in the last 12 months; this indicates slowed release maintenance.

Repo commit activity

There were no commits and no active maintainers in the measured last three months, which is a meaningful maintenance warning, although the repository has a more recent recorded push outside that window.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for a dependency project.

Workflow audit

All six workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write permissions, and high-confidence secrets-inherit findings pass credentials to reusable workflows. No untrusted checkouts or script-injection findings were found, which limits the severity.