r3c/deval

The project includes tests, release notes, a clear license, and matching source documentation. Its release history is dormant, recent commit activity is absent, and its lone maintainer plus unpinned workflow actions add ongoing maintenance risk.

Latest 1.1.8

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

The registry lists one publisher account. With user-owned project backing, this is a thin maintainer base and leaves limited demonstrated redundancy.

Release history

Only two releases were published, both around 768 days ago, with no releases in the last 12 months. This indicates a dormant release cadence and raises maintenance risk.

Repo commit activity

There were no commits and no active maintainers in the last three months. This supports the broader evidence that maintenance has slowed or stopped.

Security policy

No security policy is present. For a library with repository-backed development, this reduces transparency about vulnerability reporting and handling.

Workflow audit

Both workflows were analyzed without audit findings or dangerous untrusted triggers, but all five action references are unpinned and one workflow grants top-level write access. These are workflow hygiene concerns, not severe risks on their own.