get-tony/bal-kit

Documentation, tests, a changelog, and a matching source repository make the package straightforward to inspect. Maintenance appears paused since June 2025, and all three workflow actions are unpinned; pin this version only if you can accept limited ongoing support.

Latest v1.5.2

Packagist

57%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 464 days old but has only three releases, with no releases in the last 12 months. That suggests maintenance has paused and lowers confidence in future fixes.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the stale release history. The repository is not archived, but there is no recent activity to compensate.

Security policy

The repository has no security policy or documented security-reporting path. This is a transparency gap, though the package includes tests and a documented project structure.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. That is a supply-chain hygiene gap without evidence of an active exploit path.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Anthony Pagan

Direct Dependencies

Dependency	Last Release	Score
symfony/process Version ^6.0\|^7.0	—	—
illuminate/console Version ^10.0\|^11.0\|^12.0	—	—
illuminate/support Version ^10.0\|^11.0\|^12.0	—	—
illuminate/filesystem Version ^10.0\|^11.0\|^12.0	—	—