Package Health/hostnet/path-composer-plugin-lib

hostnet/path-composer-plugin-lib

The repository includes tests, matching package documentation, and organization backing, while the dependency surface is small. Workflow auditing found no dangerous patterns, but all three action references are unpinned and the project has no recent commit or release activity.

Latest 1.0.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2016 with seven releases, but none in the last 12 months; this indicates a mature yet currently quiet release cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, which is meaningful evidence of currently inactive maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency gap rather than a severe risk for this small package.

Security policy

The repository has no security policy, reducing the documented path for reporting vulnerabilities, though this is not by itself evidence of unsafe code.

Workflow audit

The single workflow was fully analyzed with no audit findings or untrusted execution paths. However, all three action references are unpinned, leaving avoidable build-integrity exposure.