recoil/dev

The repository has tests, release notes, a matching README, and an MIT license. Unpinned workflow actions and no security policy add hygiene risk, while maintenance activity appears limited.

Latest 0.4.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release since March 2022, despite 14 releases since 2016; this is a meaningful maintenance and abandonment concern, though the repository was pushed in November 2024.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with no releases since March 2022, this points to limited current maintenance, although the repository was pushed in November 2024.

Repo tooling

The repository uses Composer and Make for builds, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package that instruments application execution.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which leaves the build exposed to changes in referenced actions.