b13/bolt

Documentation and licensing are clear, and the organization-owned repository matches the package. All five workflow actions are unpinned, with a high-confidence template-injection finding, while maintenance activity has stopped. The release remains stable and non-deprecated, but adoption carries maintenance risk.

Latest 2.3.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in roughly three years, and there were no releases in the last 12 months despite a previously regular median interval of about 83 days. This is strong evidence of stalled maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the long release gap, this indicates current maintenance capacity is weak.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap rather than evidence that the package is unsafe.

Repository archived

The repository is not archived, but its last push was in June 2024, which only partly offsets the absence of recent releases and commits.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency, although the organization-owned project backing provides some context.