Package Health/bentools/webpack-encore-resolver

bentools/webpack-encore-resolver

The package is small and focused, with tests, a clear README, and a matching source repository. GitHub Actions use unpinned actions and the repository has no security policy; pin version 0.1 only if its older dependencies remain compatible.

Latest 0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, published in December 2019, with no releases in the last 12 months. This is strong evidence of an unmaintained published release, despite the repository still being available.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in September 2024, current activity is absent and does not support ongoing maintenance.

Security policy

The repository has no security policy. For a small package this is a transparency gap, though the absence of reported workflow findings and the presence of tests partly reduce the concern.

Workflow audit

Both workflows were analyzed successfully and have no dangerous triggers, sinks, or audit findings, but all 10 action references are unpinned. That leaves avoidable build-integrity exposure and is a minor hygiene concern.