Package Health

chrisreedio/socialment-bastion-azure

Its documentation, release notes, and security policy make adoption easier. The single-person maintainer base leaves limited continuity, while recent workflow hygiene needs attention for long-term confidence.

Latest v4.1.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Maintainerscaution

Only one registry maintainer, Chris Reed, is listed. The matching user-owned repository provides some backing, but a single publishing account leaves limited continuity if that maintainer becomes unavailable.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. A recent release and push show the project is not abandoned, but the current maintenance pause raises support risk.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write access. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; no untrusted checkout or script-injection sink was found, limiting the impact to caution.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Chris Reed

Direct Dependencies

DependencyLast ReleaseScore
filament/filament
Version ^4.0|^5.0
chrisreedio/bastion
Version ^4.1.0
chrisreedio/socialment
Version ^5.0
spatie/laravel-package-tools
Version ^1.15.0
chrisreedio/laravel-azure-graph
Version ^0.3.0|^1.0

Weekly Downloads

Info

Last Published
3 months ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform