qdenka/easyvalidation

The package includes a useful README, tests, release notes, and a small dependency set. Its single-owner project has no recent commits, while all six workflow actions are unpinned, leaving maintenance and build reproducibility concerns.

Latest 1.1

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published over roughly 16 months, with about nine months between them; this suggests a slow maintenance cadence, though the latest release is recent enough to avoid an abandonment conclusion.

Repo commit activity

There were no commits and no active maintainers in the three months before collection. The recent release partly offsets this, but the current maintenance gap is a genuine concern.

Security policy

The repository has no security policy. This is a transparency and response-process gap, although it does not by itself show that the package is unsafe.

Workflow audit

The single workflow was fully analyzed with no reported audit findings or dangerous triggers, but all six action references are unpinned, reducing build reproducibility and update control.