zenstruck/dimension

Clear documentation, repository tests, release notes, and a permissive license make integration straightforward. The small runtime dependency set and security policy help, but workflow references are all unpinned.

Latest v1.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

Only two releases have appeared since July 2022, with a long gap between them, although one release landed in the last 12 months. This suggests limited release momentum rather than abandonment by itself.

Repo commit activity

There were no commits and no active maintainers during the last three months. That weakens evidence of ongoing maintenance, even though the repository is not archived.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of unsafe code.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write permissions. However, all six action references are unpinned, leaving avoidable update and provenance risk.