zero-to-prod/spapi-lwa

Recent release and commit activity are absent, while the workflows use seven unpinned actions and contain high-confidence template-injection findings. The package is documented, licensed, tested in the repository, and not deprecated or archived.

Latest v4.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Seven runtime dependencies, including three project-local packages and required PHP extensions, create a moderate dependency surface that is relevant to maintenance but not excessive for this package.

Project backing

The registry namespace and repository are owned by the same individual account rather than an organization, so the project has a narrow visible backing structure.

Release history

The package has 20 releases over 603 days, but none in the last 12 months; that weakens confidence in ongoing maintenance despite its earlier release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has gone quiet.

Repo issue activity

There are no new or closed issues in the last month and no merged pull requests, although two pull requests remain open; this is limited evidence of current project activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

David Smith

Direct Dependencies

Dependency	Last Release	Score
zero-to-prod/factory Version ^0.1.0	—	—
zero-to-prod/container Version ^0.1.0	—	—
zero-to-prod/curl-helper Version ^1.0	—	—
zero-to-prod/package-helper Version ^1.1.3	—	—