Package Health/bernskioldmedia/block-plugin-support

bernskioldmedia/block-plugin-support

Its MIT license, small dependency surface, and complete README make the code easy to inspect. Repository tooling and a security policy help, but the workflow audit found a high-confidence bot-condition issue and an unpinned action.

Latest 2.1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The last registry release was in May 2022, with no releases in the following four years. That sharply raises abandonment and stale-dependency risk despite a history of 22 releases.

Package scaffolding

The package includes a README, changelog, and release notes for this version, but the README explicitly says the repository will become read-only because the package was integrated into another project.

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent repository push offsets this only partly and does not restore package release activity.

Repo popularity

The repository has one star and no forks, indicating limited external adoption. Popularity is supporting evidence only, but it offers little compensating evidence for the stalled release history.

Workflow audit

The only workflow has a high-confidence bot-conditions finding, uses write permissions at the workflow level, and leaves its single action unpinned. No untrusted checkout or script injection was found, so this is a hygiene concern rather than a standalone severe risk.