typicms/form

The package is clearly licensed, documented, tested in its repository, and has a small runtime dependency footprint. However, no commits were recorded in the last three months, releases are infrequent, and workflow references are unpinned. Keep the caveats in mind when adopting it.

Latest 4.0.1

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for over 8 years and published two releases in the last 12 months, but its median release interval is about 579 days, indicating slow maintenance between releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the release was pushed recently, the measured activity shows limited ongoing development capacity.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a transparency and maintenance hygiene gap rather than evidence that the package is unsafe.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All three workflows were analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all six action references are unpinned, so workflow dependencies can change without a reviewed commit.