Package Health/govigilant/vigilant-healthchecks-base

govigilant/vigilant-healthchecks-base

Tests, documentation, release notes, and a matching MIT license make the package straightforward to adopt. Its GitHub workflows leave all six actions unpinned, adding a modest reproducibility risk despite otherwise clean workflow auditing.

Latest 1.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has three releases over about ten months, with the latest published about eight months ago. This shows an established release pattern, but the recent gap limits confidence in ongoing maintenance.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the latest release being about eight months ago, this is a meaningful sign of currently quiet maintenance.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Workflow audit

All three workflows were analyzed successfully and no dangerous audit findings, untrusted checkouts, or script injections were reported. However, all six action references are unpinned, which weakens build reproducibility.