s9e/regexp-builder

The stable major version, small dependency surface, tests, and release notes support adoption. Maintenance is quiet, and the repository lacks a security policy while its only workflow uses an unpinned action.

Latest 2.1.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 18 releases over roughly 10 years, but its latest registry release was about 3 years and 7 months ago and there were no releases in the last 12 months. That is a meaningful freshness concern for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. The recent repository push provides some contrary evidence, but current development activity is still limited.

Repo tooling

The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policy

No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Workflow audit

The single workflow has no untrusted trigger or audit finding, but its one action reference is unpinned. That weakens build reproducibility and supply-chain hygiene without being a severe risk on its own.