reedware/is-attribute

Clear documentation, tests, and a tiny dependency footprint reduce integration risk. The project has had no release or commit activity since June 2023, so maintenance support is uncertain.

Latest v1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, v1.0.0, published about 3 years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, though the package is small and stable.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the package's long release gap. This lowers confidence in ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. For this small package that is a minor transparency gap rather than a severe risk.

Security policy

The repository has no security policy. This matters less for a small helper library than for security-sensitive infrastructure, but it provides less guidance for reporting vulnerabilities.

Workflow audit

All four workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, leaving a modest workflow supply-chain hygiene gap.