chevere/standard

The package has a clear license, repository tests, release notes, and only one runtime dependency. Its workflows use entirely unpinned actions and include one archived action, adding maintenance and build-integrity concerns.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in May and June 2024, with no releases in the last 12 months; this indicates meaningful abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the long release gap.

Security policy

No repository security policy was found; this is a transparency gap, though it is less significant for a small utility package than evidence of abandoned releases.

Workflow audit

All 7 analyzed action references are unpinned, and a high-confidence medium-severity archived-uses finding affects the SonarCloud workflow. The workflows have no top-level permissions blocks, which is acceptable on its own, and no untrusted checkout or script-injection paths were found.