Package Health/tuupola/branca-middleware

tuupola/branca-middleware

The source project is small but has a clear package layout, tests, and release documentation. Its maintenance and workflow hygiene warrant pinning version 0.7.0 rather than expecting active updates.

Latest 0.7.0

Packagist

59%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases since August 2017, but its latest release was in October 2020 and there were no releases in the last 12 months. This is a meaningful maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has seen little recent development since its last push in May 2022.

Repo tooling

The repository uses Composer and Make, but no security-scanning tools were detected. For a small middleware project this is a modest transparency and maintenance gap, not a severe risk.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This lowers transparency but does not by itself make the release unfit.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which leaves the build exposed to moving action revisions.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mika Tuupola

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0	—	—
tuupola/branca Version ^2.2.1	—	—
psr/http-message Version ^1.0	—	—
tuupola/http-factory Version ^1.1.0	—	—
tuupola/callable-handler Version ^0.3.0\|^0.4.0\|^1.0	—	—