windwalker/srp

Documentation, licensing, repository tests, and a matching organization-backed source project provide a solid base. The main reservations are no commits in the last three months, no security policy or scanning, and four unpinned workflow actions.

Latest 1.0.4

Packagist

67%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has seven releases over nearly three years and a release on March 21, 2026, but only one release in the last 12 months. The recent release partly offsets the slower ongoing cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The release on March 21, 2026 shows recent publishing, but does not demonstrate continuing development capacity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a package implementing a security-sensitive authentication protocol, this is a meaningful hygiene gap.

Security policy

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities in a security-sensitive package.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, leaving their exact versions uncontrolled.