soloterm/grapheme

The package includes clear documentation, repository tests, release notes, and matching project ownership. The workflow audit finds every action unpinned and a high-confidence template-injection warning, while no commits in the last three months lowers confidence in ongoing maintenance.

Latest v1.1.1

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent release history partly compensates, but the lack of current development lowers maintenance confidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.

Workflow audit

All 9 analyzed action references are unpinned, and the release workflow has a high-confidence template-injection finding; the audit was complete, but no untrusted trigger or checkout sink was reported, limiting the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Aaron Francis

Direct Dependencies

Dependency	Last Release	Score
symfony/polyfill-mbstring Version ^1.27.0	—	—
symfony/polyfill-intl-grapheme Version ^1.27.0	—	—
symfony/polyfill-intl-normalizer Version ^1.27.0	—	—