somnambulist/collection

The package has a long release history, a stable major version, clear licensing, tests, and an organization-backed repository. Recent repository activity is absent, and both workflow action references are unpinned, so maintenance and build reproducibility warrant attention.

Latest 5.6.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, which lowers confidence in ongoing maintenance despite the recent release and long history.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity; this is consistent with a quiet project but provides little evidence of active community maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected, leaving a repository security-hygiene gap.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both of its action references are unpinned, which weakens build reproducibility and supply-chain hygiene.