Package Health/simplestats-io/php-client

simplestats-io/php-client

Plain PHP client for SimpleStats analytics. Track visitors, registrations, and payments. Discover which channels actually drive revenue, not just traffic. Server-side, GDPR compliant.

Latest v1.0.2

Packagist

62%

Total Score

caution

No commits in three months and weak GitHub Actions hygiene temper an otherwise well-structured, clearly licensed release.

Health Score Breakdown

Release history

The package is young at 175 days old and has only two releases, with a median interval of about 50 days. This provides limited evidence of long-term maintenance maturity.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. With only two releases overall, this is meaningful evidence of currently quiet maintenance.

Repo popularity

The repository has one star, zero forks, and one watcher. This offers little supporting evidence of adoption, though popularity alone is not a health verdict.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package does use Dependabot.

Workflow audit

All five workflows were analyzed, but all 12 action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so these are workflow-hygiene concerns rather than a severe standalone risk.