Package Health/vasek-purchart/phing-tester

vasek-purchart/phing-tester

The package is small, documented, licensed, and has repository tests. Its registry release history is stale, recent commit activity is absent, and all 16 workflow actions are unpinned. Pin this version only if its older PHP and Phing compatibility fits your project.

Latest 2.1

Packagist

60%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, so ownership is consistent, though it does not provide organizational backing or a broad support base.

Release history

The latest registry release was in March 2022, with no releases in the following four years and only four releases overall. This indicates stale publishing and raises maintenance risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this is a meaningful sign of limited current maintenance.

Security policy

No security policy is present in the repository. For a small library this is a transparency gap, though it is less serious because the repository is not archived and uses Dependabot.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 16 action references are unpinned. The missing top-level permissions block is acceptable on its own; the unpinned references remain a supply-chain hygiene concern.