Package Health/humanmade/hubspot-form-block

humanmade/hubspot-form-block

The project includes tests, recent releases, and active contributions from two maintainers within an organization-backed repository. Workflow permissions, mostly unpinned actions, template-injection findings, and the lack of security scanning or a security policy leave meaningful hygiene gaps.

Latest 0.7.0

Packagist

76%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo tooling

The project uses Composer build tooling, but no security-scanning tool was detected, leaving automated dependency or code scanning coverage unknown.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow audit

All six workflows were analyzed, but 15 of 16 action references are unpinned, three workflows grant top-level write permissions, and high-confidence template-injection findings appear in the release workflow. The template-injection findings are workflow hygiene concerns here because no untrusted checkout or script-injection trigger was observed.