wsdltophp/wsdlhandler

Strong tests, documentation, release notes, and an organization-backed repository support dependable maintenance practices. The workflows use all 8 actions without pinning and reference archived actions, while the lack of recent commits adds ongoing maintenance risk.

Latest 1.0.7

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 8 releases since January 2021, but none in the last 12 months and the latest release was about 20 months ago. This is meaningful evidence of slowing maintenance, despite a previously regular median release interval of about 62 days.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with no releases in the last year, this lowers confidence in ongoing maintenance.

Security policy

No security policy is present in the repository. This is a modest transparency gap for reporting vulnerabilities, but it is not by itself evidence of abandonment.

Workflow audit

All 8 analyzed action references are unpinned, and both workflows use archived actions with high-confidence medium-severity findings. There are no untrusted checkouts, script injections, or top-level write permissions, which limits the impact to workflow hygiene rather than a severe supply-chain concern.