eloquage/embed

Usable with caveats: this is a brand-new 0.1.0 package with no track record or post-release commit activity yet. It has clear licensing, a matching organization repository, tests, a changelog, minimal runtime dependencies, and no install-time scripts, but workflow permissions and the lack of a security policy need review.

Latest v0.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Dangerous workflows

One of six workflows uses pull_request_target for Dependabot auto-merge, creating a workflow design that deserves review even though no untrusted checkout or script injection was detected.

Release history

This is the package's first release, published today, so there is no release history to demonstrate sustained maintenance or compatibility stability.

Repo commit activity

No commits or active maintainers were recorded during the last three months, but the repository and release were created today, so this is evidence of limited history rather than a demonstrated collapse in maintenance.

Security policy

No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting and response expectations undocumented for a new package.

Token permissions

Three workflows request top-level write permissions and one lacks top-level permissions, increasing the repository's automation privilege surface despite two read-only workflows.