spatie/simple-tcp-client

The organization-backed repository has tests, release notes, a clear license, and a small runtime dependency set. Recent commit inactivity and broadly permitted, unpinned workflows warrant monitoring despite the latest release and active repository state.

Latest 1.1.3

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases over roughly 14 months, but only one release in the last 12 months, indicating a slower recent cadence without showing abandonment by itself.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance concern even though it was pushed more recently than that window.

Security policy

The repository has no published security policy, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, not evidence of unsafe code.

Workflow audit

All four workflows were analyzed with no audit findings or untrusted checkouts. However, all nine action references are unpinned and three workflows grant top-level write permissions, creating moderate reproducibility and least-privilege hygiene concerns without a demonstrated dangerous sink.