chevere/action

Clear licensing, repository tests, release notes, and security tooling add useful confidence. The single active contributor and unpinned workflow actions remain the main reservations.

Latest 3.0.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo bus factor

All 2 recent commits came from one contributor, concentrating maintenance responsibility; organization backing provides some ability to hand work off, but no second active contributor is shown.

Repo commit activity

Only 2 commits were recorded in the last 3 months, showing limited recent development activity, although the release history provides compensating evidence of continued publishing.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a library consumers may integrate into applications.

Workflow audit

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 7 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.