Package Health/zero-to-prod/psr4-classname-cli

zero-to-prod/psr4-classname-cli

The repository includes tests, a clear README, release notes, security tooling, and no install-time scripts. Maintenance has stopped for over a year, while workflow safety needs attention because every action reference is unpinned and audits found injection-related issues.

Latest v1.1.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases and none in the last 12 months; its latest release was over a year ago, which is a meaningful maintenance concern.

Repo commit activity

There were no commits and no active maintainers in the last three months, reinforcing the abandonment concern indicated by the release gap.

Repo popularity

The repository has zero stars and forks and only one watcher. This is weak supporting evidence, but it does not outweigh the package's concrete maintenance signals.

Workflow audit

All 13 action references are unpinned, and the audit found high-confidence template-injection findings plus a script-injection count; the low-confidence GITHUB_ENV finding is only a hygiene concern. The workflows were fully analyzed, but this remains a material supply-chain maintenance weakness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

David Smith

Direct Dependencies

Dependency	Last Release	Score
symfony/console Version ^7.2	—	—
zero-to-prod/data-model Version ^81.9	—	—
zero-to-prod/package-helper Version ^1.1.3	—	—
zero-to-prod/psr4-classname Version ^71.0	—	—