ejunker/modular

A clear README, extensive tests, MIT licensing, and no install-time scripts make the package easier to evaluate and integrate. Workflow hygiene is mixed, with all actions unpinned and one archived action.

Latest 1.0.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in more than five years: its latest and only release date is October 2020, despite eight total releases. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That confirms current maintenance has effectively stopped, although the repository was pushed more recently than the registry release history.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That weakens ongoing maintenance assurance without proving the package is unsafe.

Security policy

The repository has no security policy. This is a transparency and maintenance gap, though it is less significant than the inactive release and commit history.

Workflow audit

All 13 workflow action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. No untrusted checkouts, script injection, or broad top-level write permissions were found.