fr3nch13/pushover-bash

The package includes a clear README, license, and release notes for this version. Its workflows use unpinned actions and contain a high-confidence template-injection finding, while repository activity has stopped since July 2023. The lack of a security policy adds a smaller transparency concern.

Latest 1.0.4

Packagist

52%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, so there is no mismatch in ownership evidence. Individual ownership does not provide the capacity of organization backing.

Release history

The package has had no registry release in about three years, with all three releases concentrated in July 2023. This is meaningful abandonment evidence, although the package is small and its latest release is stable.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no development activity since July 2023. This materially raises maintenance and abandonment risk.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. For a small shell-script package this is a modest hygiene gap, not evidence of abandonment by itself.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency concern, but not a severe dependency risk on its own.