Package Health/szemul/debugger-guzzle-bridge

szemul/debugger-guzzle-bridge

It has a focused package, tests, a matching repository, and a stable release. Maintenance appears dormant since July 2023, and all eight workflow actions are unpinned, so ongoing support and build reproducibility are concerns.

Latest 1.0.1

Packagist

60%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases since August 2021, with no release in the last 12 months and a latest release in July 2023. This indicates a small, possibly dormant project, though a focused bridge package may need few releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. There is no provided recent activity to offset the maintenance concern.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The linked repository has no security policy. For a small middleware library this is a transparency gap, although the absence does not by itself indicate unsafe code.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 8 of 8 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the package unfit on its own.