cslant/blog-api-package

MIT licensing, tests, release notes, and organization-backed ownership provide useful transparency. Pin this version and watch for renewed releases or CI fixes before adopting it in a long-lived Laravel application.

Latest v2.0.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 11 releases since July 2024, but none in the last 12 months; the latest registry release was about 15 months ago. This is a meaningful maintenance concern despite the earlier regular cadence.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This weakens confidence in ongoing maintenance, especially alongside the absence of registry releases in the last 12 months.

Security policy

The repository has no SECURITY.md or other security policy. This is a transparency gap for reporting and handling defects, though it is not evidence that the package is unsafe.

Workflow audit

All 12 analyzed action references are unpinned, and the audit found high-confidence bot-condition and unpinned-container-image findings. Top-level write permissions also appear in three workflows; with no untrusted checkout or script-injection findings, this is a material CI hygiene concern rather than a standalone critical risk.