codeat3/blade-govicons

The package is small and focused, with a clear MIT license, repository tests, and release notes for this version. Its three runtime dependencies are modest, and the repository matches the package.

Latest 1.6.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 5 years but has only 7 releases, with one release in the last 12 months and a median interval of about 12 months. This indicates slow maintenance, though the latest release is recent and current.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning, although the project has a recent release and push history.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small icon package this is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This weakens transparency for reporting vulnerabilities, though the package's narrow asset-focused scope limits the practical impact.

Workflow audit

All 13 analyzed GitHub Actions uses are unpinned, which leaves workflow dependencies exposed to upstream changes. The audit found no untrusted checkout, script injection, dangerous trigger, or high-confidence secret issue.