tomaj/prepositioner

The package has clear documentation, tests, a simple dependency profile, and no install-time scripts. Its registry release is nearly six years old, while recent repository activity is absent and workflow dependencies are not pinned.

Latest 3.0.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2020, nearly six years ago, and there were no releases in the last 12 months. This materially raises maintenance and compatibility risk despite a history of nine releases.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates currently quiet maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For this small PHP library, the missing scanning is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no security policy. This reduces transparency for vulnerability reporting, although the package's small scope and simple dependency profile partly limit the concern.

Workflow audit

All six analyzed action references are unpinned, and the audit found one high-confidence medium-severity archived action. Workflows were fully analyzed with no untrusted checkouts or script injection, so this is a hygiene concern rather than a release blocker.