ttpryg/audit-engine

The project is brand new, with only two releases and no recorded commits in the last three months, so maintenance capacity is unproven. Its license, repository tests, dependency tooling, and matching source repository provide useful transparency, while unpinned workflow actions remain a minor hygiene concern.

Latest 1.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 0 days old with only two releases, so there is not enough release history to establish sustained maintenance. This is a meaningful maturity gap rather than evidence of abandonment by itself.

Repo commit activity

No commits or active maintainers were recorded in the last three months. Because the repository is newly created, this mainly shows that sustained maintenance is unproven rather than that an established project has gone dormant.

Repo popularity

The repository has zero stars, forks, and watchers. For a package released only minutes earlier this is expected, but it offers no independent evidence of maturity or community support.

Security policy

The repository has no security policy. This is a transparency gap for an audit-logging library, although it is not by itself evidence that the release is unsafe.

Workflow audit

The single workflow was fully analyzed and has no detected dangerous sinks or audit findings, but both of its action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.