rumenx/php-chatbot

Strong documentation, testing, licensing, and security coverage make the project easy to evaluate. Recent repository activity is thin and entirely concentrated in one maintainer, while all seven workflow actions are unpinned.

Latest v1.1.0

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Repo bus factor

All recent commits come from one contributor, leaving maintenance dependent on a single person. The repository is user-owned rather than organization-backed, so there is no shown handoff capacity to offset that concentration.

Repo commit activity

Only one commit was recorded in the last three months, with one active maintainer; this indicates thin recent maintenance even though the project is not abandoned.

Version stability

The assessed release is a stable, non-prerelease major version with no recent prerelease share. The reported latest version being v1.0.1 conflicts with the assessed v1.1.0 and slightly reduces confidence in the metadata.

Workflow audit

All three workflows were analyzed successfully, use read-only permissions, and have no reported audit findings or untrusted checkout sinks. However, all seven action references are unpinned, leaving avoidable dependency-integrity risk.