hasnayeen/themes

Usable with caveats: the release is licensed, documented, stable, and backed by a matching, non-archived repository with security tooling. However, it has had no registry releases in about 18 months and no recorded commits or active maintainers in the last 3 months, so maintenance may be slowing.

Latest v3.0.24

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Dangerous workflows

One of five workflows uses pull_request_target, which warrants review because that trigger can expose repository privileges to pull-request handling. No untrusted checkouts or script-injection patterns were detected, reducing the concern.

Lifecycle scripts

The package uses a post-autoload-dump Composer lifecycle script. This is a review point because installation executes package-defined behavior, but the signal alone does not show that the behavior is unsafe or unusually broad.

Project backing

The registry namespace and repository are owned by the same individual account, Hasnayeen. This is consistent ownership, but it does not provide the resilience of organization backing.

Release history

The package has 25 releases since September 2023, but none in the last 12 months and the latest release was about 18 months ago. This is a meaningful maintenance concern, although the package has an established release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last 3 months. Together with no registry releases in the last year, this raises concern that maintenance has slowed, even though the repository was pushed more recently.