silarhi/cfonb-parser

The package is well documented, licensed, stable, and has a small runtime dependency surface. Recent repository work and organizational backing help, but one contributor currently carries all recent commits and the project lacks a security policy and automated security scanning.

Latest 6.4.0

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 3 commits in the last 3 months, creating a narrow recent contributor base; the organization-owned project provides some handoff capacity but does not remove the concentration concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated project hygiene.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow audit

The single workflow was fully audited with no reported findings, no untrusted checkouts, and no script injection; however, both action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.