sanmai/version-info

The package is licensed, has a clear README, a small dependency surface, repository tests, and a documented release. GitHub Actions use unpinned references and contain a high-confidence template-injection finding; no security policy is published.

Latest 0.2.3

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual, so ownership is clear, but there is no organizational backing shown to broaden maintenance capacity.

Release history

The package has five releases over roughly six years, with no release in the last 12 months. That is a meaningful sign of slow maintenance, although the latest release has documented notes.

Repo commit activity

There were no commits or active maintainers in the last three months. Two merged pull requests in the last month provide some activity, but do not fully offset the absence of direct commit activity.

Security policy

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All four workflows were analyzed, but all eight action references are unpinned. The high-confidence template-injection finding is a hygiene concern here because no untrusted checkout or dangerous trigger was observed.