Package Health/blackbadge-studio/translation-editor

blackbadge-studio/translation-editor

Usable with caveats: the release is current, licensed, and backed by an organization with repository tests and security tooling. However, there were no commits or active maintainers in the last three months, and several workflows grant write access without consistently declaring permissions.

Latest v1.1.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One of five workflows uses pull_request_target for Dependabot auto-merge, which carries elevated workflow trust requirements; no untrusted checkout or script-injection patterns were detected.

Lifecycle scripts

A post-autoload-dump script runs during installation, which adds some install-time behavior and deserves review, but a single Composer lifecycle hook is not by itself a severe health concern.

Maintainers

Only one registry publishing account is listed, which could indicate limited release continuity; the concern is partly offset by the organization-owned repository and recent release activity.

Release history

The package has three releases over 231 days, including a release within the last day; this shows recent publishing activity but only a modest history for judging long-term maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a significant maintenance-capacity concern despite the very recent release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sofian Mourabit

Direct Dependencies

Dependency	Last Release	Score
filament/filament Version ^4.0\|^5.0	—	—
spatie/laravel-package-tools Version ^1.15.0	—	—
spatie/laravel-translation-loader Version ^2.8	—	—
wedesignit/laravel-translations-import Version ^1.1	—	—