zakirullin/mess

The package is well documented, tested, licensed, and has a very small runtime dependency surface. Its recent lack of commits and limited security-process documentation reduce confidence in long-term support.

Latest 0.8.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has existed since July 2020 with 23 releases and one release in the last 12 months, showing continued publishing but a relatively slow recent cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern, although the repository was pushed recently and a release was published within the past year.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the package's tests and Psalm checks provide only partial compensation.

Workflow audit

The workflow uses read-only permissions and has no detected injection, untrusted checkout, or audit findings. However, both action references are unpinned, leaving avoidable build-integrity exposure.