browserwerk/bw_jobs

The organization-backed repository is intact, licensed, documented, and ships release notes for this version. Its workflow has a high-confidence template-injection finding and both action references are unpinned, so pin this version only with local workflow review.

Latest 3.1.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no releases in the last 12 months, and its latest release was on March 7, 2024—more than two years ago. This materially raises maintenance and abandonment risk despite 26 releases overall.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This is a meaningful sign that fixes may not arrive promptly.

Security policy

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though the package's other repository evidence partly offsets it.

Workflow audit

The single workflow was fully analyzed, but it contains a high-confidence template-injection finding and both action references are unpinned. No untrusted checkout or script-injection path was found, so this is a hygiene and supply-chain caution rather than a severe verdict on its own.