xiidea/easy-audit

The package has a clear MIT license, useful documentation, repository tests, and a long release history with a recent release. No commits in the last three months and three unpinned workflow actions weaken maintenance confidence and build reproducibility.

Latest 3.0.2

Packagist

70%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently quiet maintenance; the recent release and non-archived repository partly offset it.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while nine issues and three pull requests remain open; this adds a modest sign of limited recent project attention.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a transparency and maintenance-hygiene gap.

Security policy

The repository has no published security policy, reducing guidance for reporting and handling vulnerabilities, though this does not by itself indicate abandonment.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility. The missing top-level permissions block is acceptable on its own.