quasarstream/rtcp

Tests, a changelog, release notes, and a BSD-3-Clause license provide a solid starting point. The repository is organized and uses read-only workflow permissions, but it lacks security scanning and pins none of its three actions.

Latest v1.0.0

Packagist

64%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published 497 days ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain despite the release being complete enough to publish.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of adoption or review.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. For a protocol library, that reduces automated oversight of dependency and source changes.

Repository archived

The repository is not archived, which avoids an abandonment blocker, but it was last pushed 497 days ago. Combined with the single-release history, this is a mild maintenance concern.

Workflow audit

The workflow is fully analyzed, uses read-only permissions, and has no reported dangerous findings. However, all 3 action references are unpinned, leaving the workflow dependent on mutable upstream references.