swoft-fork/process

The fork explicitly warns that active maintenance is not guaranteed, and five workflow actions are unpinned. A clear license and tests improve transparency, but do not offset the single release and roughly 21 months without commits.

Latest v2.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 21 months ago, with no releases in the last 12 months. That is strong evidence of limited maintenance for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's warning that active maintenance is not guaranteed.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of a broader user or contributor base. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a maintenance and transparency gap, though not severe on its own.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five referenced actions are unpinned, leaving avoidable dependency-integrity exposure.