railken/cli-amethyst

The project has had no release or commit activity for nearly six years, and its workflows use unpinned container images. Tests, documentation, and an MIT license provide useful transparency, but they do not offset the abandonment risk.

Latest v0.3.5

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The latest release was on September 22, 2020, with no releases in the last 12 months. Nearly six years without a release is strong evidence of abandonment risk, despite a substantial history of 48 releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This confirms that the long release gap reflects inactive development rather than merely infrequent publishing.

Repo package mention

The repository name does not match the package name and its README does not mention the package, weakening confidence that the linked repository specifically documents this release. The organization backing provides some context but does not resolve the missing package reference.

Workflow audit

All six analyzed action references are unpinned, including a high-confidence, high-severity unpinned container image in test.yml. The audit was complete, so this is a concrete reproducibility and workflow supply-chain weakness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.0	—	—
railken/bag Version ^1.2	—	—
phpstan/phpstan Version *	—	—
symfony/console Version 4.\|5.	—	—
laravel/installer Version ^4.0	—	—