starfolksoftware/tithe

The package includes clear licensing, tests, a changelog, and a repository that matches its published name. Its workflows use unpinned actions and contain a high-confidence automation condition warning, adding maintenance and release-process concerns.

Latest v1.0.2

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was v1.0.2 on April 27, 2023, with no releases in the following nearly three years. That strongly suggests the package may be abandoned.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has had no recent development for nearly three years.

Security policy

No security policy was found, leaving vulnerability reporting and response expectations unclear for a package handling subscription billing.

Workflow audit

All 12 analyzed action references are unpinned, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull_request_target workflow had no untrusted checkout or script-injection sink, limiting the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Faruk Nasir

Direct Dependencies

Dependency	Last Release	Score
symfony/http-client Version ^6.2	—	—
illuminate/contracts Version ^9.0\|^10.0	—	—
php-http/guzzle7-adapter Version ^1.0	—	—
spatie/laravel-package-tools Version ^1.14.0	—	—
starfolksoftware/paystack-php Version ^1.0.2	—	—