bolt/newswidget

The package is small and focused, with a stable major release, clear licensing, release notes, and organization backing. Maintenance has slowed, and all seven workflow actions are unpinned, leaving modest upkeep and build-integrity concerns.

Latest 2.0.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has been published since 2019 with 19 releases, but only one release in the last 12 months; this indicates slower maintenance for a mature, focused extension.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance warning despite the recent release.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than a standalone adoption blocker.

Security policy

The repository has no security policy, reducing documented vulnerability-reporting transparency.

Workflow audit

Both workflows were analyzed without audit failures or untrusted triggers, and one scopes permissions read-only. However, all seven action references are unpinned, so their moving targets weaken build reproducibility.