zamzar/zamzar-php

The package is documented, tested, licensed, and tied to an organization-owned repository. Its recent maintenance is thin, with no release in 12 months and only two commits in three months from one contributor. Workflow references are unpinned and no security policy is provided.

Latest v2.2.0

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases since May 2021, but none in the last 12 months; the latest release was about 14 months ago. This indicates a meaningful slowdown for an API client.

Repo bus factor

One contributor made all two commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is evidenced.

Repo commit activity

Only two commits were made in the last three months, showing limited recent activity even though the repository is still active.

Security policy

The repository has no security policy, leaving reporting and response expectations unclear for an API client.

Workflow audit

All three workflows were analyzed with no audit findings or dangerous untrusted triggers, but all eight action references are unpinned. The unpinned references are a supply-chain hygiene gap, not a severe risk on their own.