turahe/master-data

The package has had no release in over a year and no commits in the last three months, limiting confidence in ongoing maintenance. Strong documentation, tests, licensing, and security tooling provide useful counterweight, but all 15 workflow actions are unpinned.

Latest v1.1.1

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual user rather than an organization, so the single registry maintainer provides limited visible continuity backing.

Release history

The latest release was over a year ago, with no releases in the last 12 months; the historical median interval of about 42 days suggests this is a meaningful slowdown.

Repo commit activity

There were no commits and no active maintainers in the last three months, a concrete sign of slowed maintenance for a package with no recent registry releases.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a modest transparency gap rather than an adoption blocker.

Workflow audit

All six workflows were analyzed with no dangerous audit findings, no untrusted checkouts, and no script injection. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.