Package Health/web-eid/web-eid-authtoken-validation-php

web-eid/web-eid-authtoken-validation-php

The project has a clear license, useful documentation, repository tests, and no install-time scripts. Release cadence is slow and recent commits come from one contributor, while four workflow actions are unpinned and no security policy is published.

Latest 1.3.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 3 years and 6 releases, but only one release arrived in the last 12 months and the median interval is about 325 days, indicating slow maintenance.

Repo bus factor

One contributor made all commits in the last 3 months. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activity

Only one commit was recorded in the last 3 months, so recent development activity is limited even though the repository was recently updated.

Security policy

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented for a security-sensitive library.

Workflow audit

Both workflows were analyzed successfully with no untrusted checkout, script injection, or high-severity findings. However, all 4 action references are unpinned, which weakens build reproducibility and supply-chain control.