somnambulist/enumeration

The package is clearly documented, tested, licensed, and backed by a matching organization repository. Its release pace is sparse, recent commit activity is absent, and workflow dependencies are unpinned, so maintenance and build-reproducibility concerns remain.

Latest 2.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only 3 releases have appeared across 989 days, with 1 release in the last 12 months and a median interval of about 446 days; this indicates a slow maintenance pace, though the latest release is recent.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, which weakens confidence in ongoing maintenance; the recent release and non-archived repository partly offset this.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.