botman/studio-addons

It has a stable release, release notes, repository tests, and organization backing. The linked repository is not archived, but all workflow references are unpinned and no security scanning or policy is present.

Latest 1.6.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 16 releases since August 2017, but none in the last 12 months and the latest was published in September 2020. This is a substantial maintenance concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates a meaningful risk of abandonment.

Repo issue activity

There were no new or closed issues or pull requests in the last month, despite 3 open issues and 6 open pull requests. This supports the evidence of stalled maintenance.

Security policy

The repository has no security policy. This is a transparency gap, although it is partly offset by the repository's published security contact in its README.

Workflow audit

The only workflow was fully analyzed with no dangerous sinks or audit findings, but all 9 action references are unpinned. That leaves routine build-integrity exposure and lowers workflow hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marcel Pociot

Direct Dependencies

Dependency	Last Release	Score
botman/botman Version ~2.0 \|\| ~3.0	—	—
guzzlehttp/guzzle Version ~6.0 \|\| ^7.0.1	—	—
illuminate/console Version ^5.5 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
illuminate/support Version ^5.5 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
illuminate/contracts Version ^5.5 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—