wgg/flysystem-doctrine

It has no security policy, and all nine workflow actions are unpinned. The package is licensed, tested in the repository, and not archived, which supports continued use despite its stale release history.

Latest 1.0.1

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in June and July 2022, with no release in roughly four years. The repository was pushed in April 2024, but that does not show continued release maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, indicating no recent development activity. This reinforces the old release history and raises maintenance risk.

Repo popularity

The repository has only 2 stars and 2 forks, showing a small adoption footprint. Popularity is supporting evidence rather than a decisive health measure, so this contributes only modest concern.

Security policy

The repository has no security policy. For a database-backed filesystem adapter, this reduces transparency around how vulnerabilities should be reported and handled.

Workflow audit

All three workflows were analyzed and had no untrusted checkouts or script-injection findings, but all nine action references are unpinned. That is a supply-chain hygiene gap, though no dangerous workflow behavior was found.