Package Health/ehaerer/rte-ckeditor-codesnippet

ehaerer/rte-ckeditor-codesnippet

The repository was pushed about 21 months ago, but the package has had no release since May 2022 and no commits in the last three months. The workflow has high-confidence template-injection and fully unpinned actions, while its license, documentation, and repository linkage are solid.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in May 2022, with no release in roughly four years and none in the last 12 months. A repository push in January 2025 provides some compensating evidence of project activity, but the published package is stale.

Repo commit activity

There were no commits and no active maintainers in the last three months. The January 2025 push partly offsets this, but current maintenance activity remains thin.

Repo tooling

Composer is used for builds, but no security-scanning tooling is configured, leaving a modest transparency and maintenance gap.

Security policy

The repository has no published security policy, making vulnerability reporting and response expectations less clear.

Workflow audit

The sole workflow has a high-confidence template-injection finding and both action references are unpinned. No untrusted checkout or dangerous trigger was observed, so this is a hygiene concern rather than a severe dependency risk.