tg/tgwebvalid

The package includes tests, a substantial README, MIT licensing, and a recent stable release. Three months with no commits and one registry maintainer limit confidence in ongoing support; the workflow is read-only but uses two unpinned actions.

Latest v4.2.5

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publishing access. The repository is user-owned rather than organization-backed, so there is no provided organizational backing to compensate for this thin publishing base.

Release history

The package has existed for about three and a half years with 16 releases, but only one release in the last 12 months, indicating a slower maintenance cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance may have slowed or stopped.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policy

The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in an authentication-related library.