shanginn/jev-php

The package is newly published, so there is little evidence yet about long-term maintenance or adoption. It has a clear license, documentation, tests in the repository, release notes, and read-only workflow permissions, but all three workflow actions are unpinned and no security policy is present.

Latest v1.0.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is a very new package with two releases in a few hours, so its maintenance record is not yet established; the rapid second release is modestly positive but cannot demonstrate durability.

Repo commit activity

There were no commits or active maintainers in the last three months, but the repository is only hours old, so this is limited evidence rather than abandonment.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.

Security policy

The repository has no security policy, which reduces transparency for reporting vulnerabilities, though this is a minor concern for a new, small package.

Workflow audit

The workflow is fully analyzed, uses read-only permissions, and has no injection or high-severity findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.