Package Health/brocode/module-entityservices

brocode/module-entityservices

The MIT license, stable versioning, small dependency footprint, and clear README support adoption. Maintenance has gone quiet, with no recent commits or releases, while workflow references are all unpinned and no security policy is published.

Latest 1.6.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 22 releases, but none in the last 12 months; the latest release was about 18 months ago. This points to reduced maintenance activity, although the release history is established.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the absence of releases in the last 12 months, this materially raises abandonment risk.

Repo tooling

The repository uses Composer build tooling, but no security scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policy

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All three workflows were analyzed without dangerous triggers, sinks, or audit findings, but all six action references are unpinned. That leaves avoidable workflow supply-chain exposure, while the lack of top-level permissions is acceptable on its own.