eftec/bladeone

The repository has tests, release notes, and a small runtime dependency footprint. GitHub Actions use unpinned references, no security policy is published, and recent commit activity is quiet.

Latest 5.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2016 with 116 releases and a historical median interval of about 9 days, but only one release appeared in the last 12 months. The latest release is very recent, which partly offsets the slower recent cadence.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. The fresh release and same-day repository push provide some evidence of current work, but do not remove the maintenance concern.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The linked repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

The single workflow was fully analyzed, uses read-only permissions, and has no high-confidence dangerous findings. Both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.