rah/rah_swap

The package is clearly documented and licensed, with a GitHub release for this version and no install-time scripts. Its registry release cadence is stale, and the workflow configuration needs tighter artifact and action controls.

Latest 0.2.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with none in the last 12 months and the latest published in April 2022; this is a meaningful maintenance concern despite the repository having a later push.

Repo commit activity

There were no commits from active maintainers in the last three months, which weakens evidence of ongoing maintenance even though the repository is not archived.

Repo tooling

The repository uses Make and Composer, showing build structure, but it reports no security-scanning tools; this is a modest transparency and hygiene gap.

Security policy

No repository security policy is provided, leaving vulnerability-reporting expectations unclear.

Workflow audit

All 9 analyzed action references are unpinned, and the CI workflow has two high-confidence artipacked findings because checkout credentials are not explicitly disabled. The audit itself completed for both workflows, but these workflow controls remain a supply-chain hygiene concern.