coldtrick/blog_tools

The long release history, stable versioning, and matching organization-backed repository support adoption. Low popularity, no recent commit activity, and missing security scanning leave meaningful maintenance and assurance gaps.

Latest v17.0

Packagist

67%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently thin maintenance activity despite the recent release.

Repo popularity

The repository has only 6 stars, 8 forks, and 5 watchers. This is limited supporting evidence and reduces external visibility, but popularity alone does not establish abandonment.

Repo tooling

Composer is used as the build tool, but no security-scanning tools were detected, leaving a modest gap in repository assurance.

Security policy

No security policy was found in the repository, so the project gives consumers no documented security-reporting process.

Workflow audit

All three analyzed workflows use unpinned actions (3 of 3), which weakens build reproducibility and action supply-chain hygiene. No dangerous triggers, untrusted checkouts, script injection, or audit findings were detected, limiting the impact to caution.