samsara/fermat

The package includes tests, extensive documentation, a changelog, and release notes for this version. Its workflows leave all eight actions unpinned, and the repository has no security policy or scanning tool, which increases maintenance and build-integrity concerns.

Latest v2.1.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in the last 12 months, and its latest release was in June 2021. This is a substantial freshness concern despite the repository remaining available.

Repo commit activity

There were no commits and no active maintainers in the three months measured. The recent repository push is some compensating evidence, but the measured development activity still points to limited ongoing maintenance.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. This is a modest transparency and supply-chain hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The package's tests and documentation compensate for general project transparency but not incident-handling guidance.

Workflow audit

Both workflows were analyzed without failed files or dangerous sinks, and neither grants top-level write access. However, all eight action references are unpinned, so their executed code can change without a reviewed version update.