Package Health/humanmade/hm-primary-category-block

humanmade/hm-primary-category-block

Recent work from two contributors and organizational ownership reduce abandonment risk. The package is licensed, documented, and has no install-time scripts, but its limited release history and workflow audit findings merit caution around future releases.

Latest 1.0.1

Packagist

72%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 205 days old with two releases and a median interval of about 175 days, so its maintenance record is still limited rather than mature.

Repo popularity

The repository has one star and no forks, offering little community validation; this is supporting evidence only and does not outweigh the active organizational ownership.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected, leaving a modest process gap.

Security policy

No repository security policy was found, reducing transparency about how maintainers handle vulnerability reports.

Workflow audit

Both workflows were fully analyzed, use three pinned actions, and have no untrusted checkouts or script-injection findings. However, the release workflow contains five high-confidence template-injection findings, which weaken release-process hygiene even without a dangerous trigger being reported.