rah/rah_pathway

The release includes a clear README, license, and release notes, and it has no install-time scripts. However, the only registry release is from April 2019, recent repository activity is absent, and the workflows have high-confidence credential-handling and pinning concerns.

Latest 0.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published in April 2019, with no releases in the subsequent seven years. That strongly raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but there is no recent development evidence to offset the inactivity.

Security policy

The repository has no security policy. For a small package this is a transparency gap rather than a standalone severe risk, but it provides no documented route for reporting vulnerabilities.

Workflow audit

Both workflows use all 9 analyzed actions without pinning, and the CI workflow has two high-confidence artipacked findings because checkout credentials are not explicitly disabled. No untrusted trigger or script-injection sink was found, which limits the impact but does not remove the workflow hygiene risk.