brynforum/top-posters

A clear MIT license, substantial README, release notes, and simple dependency set make adoption straightforward. GitHub Actions use unpinned references and the repository has no security policy or scanning, so keep update controls in place.

Latest v0.1.4

Packagist

78%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo popularity

The repository has no stars, forks, or watchers. This is weak supporting evidence, but the package is young and its recent release and contributor activity provide more relevant health evidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage limited.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.

Version stability

Version 0.1.4 is not a prerelease, but the pre-1.0 major version signals a young API whose compatibility may still change.

Workflow audit

The audit analyzed both workflows without failures and found no untrusted checkout or script-injection paths, but all five action references are unpinned and one workflow grants top-level write access. Without an untrusted trigger, this is workflow hygiene rather than a severe risk.