renoki-co/php-helm

The package has clear licensing, a focused dependency set, and a matching source repository. Its last registry release was over four years ago, with no commits in the latest three months, while workflow references remain unpinned.

Latest 1.11.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was in May 2022, and there were no releases in the last 12 months. The established release history partly offsets the long release gap, but the age raises maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the latest three months. This is a meaningful sign of currently limited development activity, even though the repository is not archived.

Repo issue activity

There are no open issues and four open pull requests, but no issues or pull requests were merged in the latest month, offering little evidence of active maintenance.

Security policy

The README gives a security contact, but the repository has no formal security policy file. The contact is useful compensation, so this is only a minor transparency gap.

Workflow audit

All five workflow action references are unpinned, which weakens build reproducibility. The reported cache-poisoning finding has low confidence and is hygiene-level under the audit rules, while the workflow has no untrusted checkout or script-injection sink.