r3c/custom-from

The package includes tests, a clear README, release notes for this version, and MIT licensing. No commits were recorded in the last three months, while every workflow action reference is unpinned and the repository lacks a security policy.

Latest 1.8.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual account, so ownership is consistent, though it does not provide organizational backing or redundancy.

Release history

The package has 10 releases over roughly six years, but none in the last 12 months; the latest release was published about 22 months ago. This indicates a mature but currently quiet release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release history and non-archived state provide some context.

Security policy

The repository has no security policy. This lowers transparency for reporting vulnerabilities, though it is a moderate concern rather than evidence of abandonment by itself.

Workflow audit

Both workflows were analyzed successfully with no audit findings or untrusted checkouts, but all 5 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene concerns without a reported dangerous trigger or sink.