segmentio/analytics-php

Documentation, licensing, tests, and the small dependency footprint support dependable use. The project is in maintenance mode, with no commits in the last three months. All 22 workflow action references are unpinned, adding avoidable build-supply-chain exposure.

Latest 3.8.2

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the stated maintenance-only posture, this raises the risk of slow fixes and limited future support.

Security policy

The repository has no security policy. For a maintained client library this weakens vulnerability-reporting transparency, though security scanning tools provide some compensation.

Workflow audit

All four workflows were analyzed with no detected injection, untrusted-checkout, or high-confidence audit findings. However, all 22 action references are unpinned, so workflow dependencies can change without a reviewed commit.