spatie/regex

The organization-backed project has a matching repository, tests, release notes, and a clear license. Unpinned workflow container images and no security scanning weaken build hygiene, while recent commit activity is quiet.

Latest 3.1.1

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 16 releases since August 2016, but none in the last 12 months and the latest release was in November 2021. This materially raises staleness risk for a dependency.

Repo commit activity

There were no commits or active maintainers in the last three months. This is a meaningful maintenance concern, though the repository's recent push and established project history provide some compensation.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. That reduces transparency for vulnerability reporting, although the package's narrow scope limits the practical impact.

Workflow audit

All three workflows were analyzed without untrusted triggers or script injection, but the audit found a high-confidence unpinned container image and all seven action references are unpinned. This weakens build reproducibility and workflow supply-chain hygiene.