zeuxisoo/slim-whoops

The package has a clear README, tests, a declared license, and a small runtime dependency set. Its repository is not archived and was pushed in April 2024, but the release history and recent commit activity indicate a largely inactive project, while workflow references are not pinned.

Latest 0.7.3

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2020, with no releases in the last 12 months, despite 17 releases over the package's lifetime. This is a substantial maintenance concern for a framework integration package.

Repo commit activity

There were no commits and no active maintainers during the last three months. Together with the old latest release, this supports a meaningful abandonment concern.

Repo tooling

The project uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap.

Security policy

The repository has no security policy. For a small middleware package this is not severe, but it leaves vulnerability-reporting expectations unclear.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. That weakens build reproducibility without indicating an immediate severe risk.