tourze/async-contracts

The package is small and clearly documented for its narrow contract role. Licensing, tests, and a stable release provide useful baseline confidence, while the remaining maintenance evidence is limited.

Latest 1.0.0

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases over about 15 months, with one release in the last 12 months and the latest release about 10 months ago. This indicates a limited maintenance track record for a young package.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. For a small contract-only package this may reflect stability, but it still provides weak evidence of ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. The absence is a minor transparency and maintenance gap rather than a severe adoption risk.

Security policy

The repository has no security policy. For a narrow interface package this is a modest process gap, but it leaves vulnerability-reporting expectations unclear.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.