rockero-cz/ci

The package has an MIT license, a matching repository, tests, release notes, and Composer/Dependabot tooling. Its small organization-backed project remains transparent, but adoption should account for the long maintenance gap.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published in February 2023 and none in the last 12 months; this is a substantial maintenance gap for a dependency.

Repo commit activity

There were no commits and no active maintainers in the preceding three months, reinforcing the risk suggested by the old latest release.

Repository archived

The repository is not archived, but its last push was in October 2023, which is consistent with the observed inactivity rather than evidence of current maintenance.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations less clear for a package intended for application integration.

Workflow audit

All 12 action references are unpinned, and one high-confidence bot-conditions finding affects a pull_request_target workflow; the audit found no untrusted checkout or script injection, so this is a hygiene and workflow-maintenance concern rather than a severe standalone risk.