el-schneider/statamic-html-minify
This is a generally usable and transparently maintained package with a stable v2.1.0 release, a matching repository, documented configuration, a changelog, repository tests, Composer-based tooling, and Dependabot scanning. However, maintenance appears relatively lightweight: there have been only 8 releases over more than 6 years, just 1 release in the last 12 months, no commits or active maintainers in the last 3 months, and the repository has negligible adoption indicators. A single registry maintainer, absent security policy, write-enabled workflows, and a pull_request_target workflow add governance and operational concerns, though none independently make the package unfit to depend on.
72%
Total Score
63
100
89
70
Health Score Breakdown
One of four workflows uses pull_request_target, specifically the Dependabot auto-merge workflow. No untrusted checkout or script-injection findings were detected, which limits but does not eliminate workflow-risk concerns.
Only one account has registry publish access, creating a bus-factor concern for publishing continuity. The repository is user-owned rather than organization-owned, so there is no organizational backing signal to compensate for this.
The source repository is owned by the user account el-schneider, so the project has identifiable ownership but no demonstrated organization-level backing.
The package has existed for about 6 years and has 8 releases, but only 1 release occurred in the last 12 months and the median release interval is about 154 days. This supports maturity but indicates a relatively slow release cadence.
The repository recorded 0 commits and 0 active maintainers over the last 3 months. Although the latest release and repository push are recent, the recent commit silence raises maintenance-continuity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vaggelis Yfantis |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^5.0 || ^6.0 | — | — |
voku/html-min Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.