rollun-com/rollun-dic

Tests, documentation, release notes, and organizational backing make the package understandable to adopt. Its small dependency surface and matching repository help, but workflow actions are unpinned and no security policy or scanning is present.

Latest 4.1.2

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 31 releases since January 2017, but none in the last 12 months; the latest registry release was in November 2024. This indicates a meaningful maintenance slowdown for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this is a clear maintenance concern.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is not severe on its own.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

The sole workflow was fully analyzed with no high- or medium-severity findings and no untrusted checkout or injection sink. However, both action references are unpinned, which weakens build reproducibility.