Package Health/innoweb/silverstripe-fastly

innoweb/silverstripe-fastly

Clear licensing, release notes, and a readable package tree make adoption straightforward. The repository has no security policy, no security scanning, and all three recent commits came from one contributor.

Latest 4.0.1

Packagist

74%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The source repository is owned by a user account rather than an organization, so there is no provided organization backing to offset the concentrated recent contribution pattern.

Repo bus factor

All 3 recent commits came from one contributor, giving the project a top-contributor share of 100%. With a user-owned repository and no second active contributor shown, continuity depends heavily on one person.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest security-hygiene gap rather than evidence that the release is unsafe.

Security policy

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for consumers of this integration.

Workflow audit

Both workflows were analyzed successfully with no high- or medium-confidence audit findings, untrusted checkouts, or script injection. However, one workflow has top-level write permissions and its one action use is unpinned, so workflow hygiene is not perfect.