concept7/statamic-health

Release historycaution

Four releases arrived over about four weeks, but the latest release was about four months ago, so recent maintenance continuity is uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have paused.

Security policycaution

The README refers to a security policy, but the repository contains no policy file, leaving vulnerability reporting less transparent.

Version stabilitycaution

This is a non-prerelease 0.0.4 version, but the pre-1.0 major version indicates a less mature compatibility commitment.

Workflow auditcaution

All 12 analyzed action references are unpinned, and three workflows grant top-level write permissions. The audit also found a high-confidence bot-condition issue; the pull_request_target workflow had no untrusted checkout or script-injection finding, so this is workflow hygiene risk rather than a severe standalone concern.