Package Health/sebkay/simple-php-validator

sebkay/simple-php-validator

There is no security policy or automated security scanning, leaving limited evidence of security maintenance. The MIT license, tests, release notes, and matching repository provide useful transparency, but the project appears small and inactive.

Latest 0.7.2

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on October 25, 2023, and there have been no releases in the last 12 months. The package had nine releases over its first year, but the long subsequent gap lowers confidence in ongoing maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the extended release gap. This is meaningful abandonment risk for a dependency, even though the repository is not archived.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these values provide little external evidence of review or adoption.

Security policy

The repository has no security policy, so users are not given a documented vulnerability-reporting path. The absence of security scanning in repo_tooling provides no compensating evidence.

Workflow audit

The single workflow was fully analyzed with no injection or high-severity findings, but all 9 of its action references are unpinned. That leaves the build exposed to moving action code and is a workflow hygiene concern.