ganadev/shield-core

The package includes a clear README, extensive tests, minimal runtime dependencies, and security scanning tools. It is very new with no observed three-month commit activity, while all seven workflow actions are unpinned and no security policy is published.

Latest v1.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is from a package only hours old, with two releases so far and a very short median interval, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activity

No commits or active maintainers were observed in the last three months; because the project is only hours old this may reflect its age, but it provides no evidence of ongoing maintenance yet.

Repo popularity

The repository has no stars, forks, or watchers. This is weak supporting evidence for maturity, but the package is too new for low popularity to be decisive.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations and response guidance unclear.

Workflow audit

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or excessive permissions, but all seven action references are unpinned, weakening build reproducibility and supply-chain hygiene.