astrogoat/google-reviews

The package has clear licensing, documentation, tests, and organizational ownership. Its recent inactivity and unpinned workflow images reduce confidence in ongoing maintenance and build reproducibility.

Latest v1.16.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 20 releases over roughly four and a half years, but has had no release in the last 12 months, which raises maintenance concerns.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the absent recent releases and indicating currently inactive development.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Workflow audit

Both workflows were analyzed completely and have no untrusted checkouts or script injection, but all four action references are unpinned and a high-confidence audit finding reports an unpinned container image, weakening build reproducibility.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Megan

Direct Dependencies

Dependency	Last Release	Score
astrogoat/strata Version ^0.7.0\|^0.8.0\|^0.9.0\|^0.10.0\|^0.11.0	—	—
illuminate/contracts Version ^8.37 \|\| ^9.0\|^10.0\|^11.0	—	—
spatie/laravel-package-tools Version ^1.4.3	—	—