rdlowrey/auryn

Usable with caveats: this is a mature, stable package with a matching repository, tests, and a clean release artifact, but its last registry release was over five years ago and recent repository activity is absent. Treat it as a maintenance-risk dependency rather than an actively developed one.

Latest v1.4.4

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 36 releases since 2012, but none in the last 12 months and the latest release was over five years ago. That long release gap is a meaningful maintenance concern, despite the historically established release cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with no registry releases for over five years, this indicates the package may be largely dormant.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap, while the build setup still supports reproducible project maintenance.

Security policy

No repository security policy was found. This does not make the package unsafe by itself, but it leaves vulnerability-reporting expectations and response procedures unclear.

Token permissions

The repository's workflow does not declare top-level token permissions. No write permissions were observed, but explicitly restricting workflow tokens would provide stronger security hygiene.