Package Health/tourze/file-name-generator

tourze/file-name-generator

Its small scope keeps dependencies simple, and the package includes clear consumer documentation and tests. The release cadence is modest and the repository lacks a security policy; all three workflow actions are also unpinned, though the audit found no dangerous triggers or findings.

Latest 1.0.0

Packagist

78%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases over 496 days, with one release in the last 12 months and a median interval of about 171 days. This shows some activity but only a modest maintenance record.

Repo popularity

The repository has zero stars and forks and one watcher, so there is little external adoption evidence. For a small focused library, this is supporting caution rather than a standalone health failure.

Repo tooling

Composer build tooling is present, but no security scanning tooling is reported, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy. This does not make the package unsafe by itself, but it weakens the project's stated process for handling vulnerabilities.

Workflow audit

Both workflows were analyzed completely and produced no findings, with no untrusted checkout or script injection; however, all three action references are unpinned, which weakens build reproducibility.