Package Health/webignition/php-basil-model-provider

webignition/php-basil-model-provider

Its small, tested codebase is licensed, but security practices and workflow pinning are limited. The repository remains available rather than archived, which reduces—but does not remove—the maintenance concern.

Latest 0.11

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no distinct replacement identified. This is a direct warning against adopting the release despite the otherwise usable artifact.

Release history

The package has 12 releases since August 2019, but none in the last 12 months and the latest release was January 17, 2022. That long release gap indicates substantial abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and limited evidence of ongoing maintenance.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the abandonment indicators.

Workflow audit

All 10 analyzed GitHub Actions references are unpinned, which weakens build reproducibility and supply-chain hygiene. The audit found no untrusted checkouts, script injection, or high-severity findings, so this remains a caution rather than a severe workflow risk.