stefna/ds-collection

The source includes tests, a matching MIT license, and a recent release, while the organization-backed project is not archived. Maintenance activity is currently quiet, security scanning is absent, and all six workflow actions are unpinned.

Latest 1.2.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers during the last 3 months, indicating currently quiet maintenance and some abandonment risk despite the recent release.

Repo popularity

The repository has zero stars and forks and only three watchers, offering little supporting evidence of broad adoption or external attention.

Repo tooling

Composer is used for the build, but no security-scanning tool is configured, leaving automated vulnerability coverage absent.

Security policy

The repository has no security policy, making the project's vulnerability-reporting process unclear.

Workflow audit

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned, weakening build reproducibility and supply-chain hygiene. No top-level permissions block is acceptable on its own.