coldtrick/pages_tools

Consumer documentation, release notes, and a small dependency surface are solid. Maintenance is recent but concentrated in one contributor, while the workflows use unpinned actions and the repository has no security scanning. The organization backing reduces, but does not remove, continuity risk.

Latest v9.0.1

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All two recent commits came from one contributor, concentrating short-term maintenance capacity. Organization ownership provides some handoff potential, but no second recently active contributor is shown.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That weakens proactive maintenance hygiene without making the package unfit to use.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow audit

All three workflows were analyzed cleanly and have no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, which leaves the build exposed to action changes over time.