thelia/click-send-module

The stable release and clear README make adoption straightforward, while the small dependency set limits maintenance surface. The project has been inactive for nearly two years and lacks a security policy, so future compatibility and response capacity are uncertain.

Latest 1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, with the latest push nearly two years ago. This is the strongest evidence of abandonment risk in the available signals.

Release history

The package has only three releases and none in the last 12 months; its latest release was nearly two years ago. This indicates limited ongoing maintenance, though the release intervals were reasonably measured rather than erratic.

Repo tooling

The project uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the release is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities or describing supported security practices. This reduces transparency for a module that handles API credentials.

Workflow audit

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. Its single action use is unpinned, which is a minor reproducibility and supply-chain hygiene concern.