sokil/php-vast

The package includes tests, release notes, a clear license, and a matching source repository. Its workflow has five unpinned actions and the repository has no security policy, increasing maintenance and build-trust concerns.

Latest 2.2.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 25 releases over roughly 12 years, but no releases in the last 12 months; the latest release was about three years ago. This is meaningful evidence of slowing maintenance, despite its established history.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this points to stalled maintenance rather than merely a quiet release cadence.

Repo issue activity

There are only two open issues, no open pull requests, and no issue or pull-request activity in the last month. The small backlog is manageable, but the lack of recent activity supports a maintenance concern.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe by itself.

Security policy

The repository has no security policy. For a maintained library, this weakens vulnerability-reporting transparency, though the license, tests, and source visibility provide compensating project evidence.