cbl/blade-style

It has a clear MIT license, useful documentation, tests, and a small runtime dependency set. The CI workflow uses six unpinned actions and the repository has no security policy, so updates deserve extra scrutiny.

Latest v1.1.0

Packagist

64%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 15 releases since June 2020, but its latest release was about 2 years and 4 months ago and there were no releases in the last 12 months. This indicates a mature but currently inactive release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this shows no recent maintenance activity.

Repository archived

The linked repository is not archived, although it was last pushed about 2 years and 4 months ago. Its availability is positive, while the old push date is consistent with the maintenance concern in the release history.

Security policy

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it does not by itself show that the package is unsafe.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 6 action references are unpinned. Missing top-level permissions is acceptable on its own, while unpinned actions remain a supply-chain hygiene gap.