carry0987/sanite

The small user-owned project has no recent commit activity and no security policy, while its release history and documentation are solid. Workflow references are all unpinned and include a high-confidence template-injection warning, so pinning this version warrants care.

Latest 1.3.10

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, indicating that maintenance has recently stopped despite the recent release.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher; this is weak supporting evidence, but popularity alone does not determine package health.

Repo tooling

Composer build tooling is present, but no repository security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, so users have no documented process for reporting or handling vulnerabilities.

Workflow audit

All 6 action references are unpinned, and the release workflow has a high-confidence template-injection finding. The audit was complete, and no untrusted checkout or script-injection trigger was reported, so this is a hygiene concern rather than a severe verdict on its own.