jweiland/tender

An organization-backed repository remains unarchived, has tests, and received a commit within the last three months. The package is licensed and documented, but its single recent contributor and absent security policy leave limited evidence for broader maintenance.

Latest 2.0.2

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no registry release in more than three years, despite seven releases overall. Recent repository activity partly offsets the stale release cadence but does not remove the maintenance concern.

Repo commit activity

Only one commit was recorded in the last three months, by one active maintainer. This shows some current activity but a limited recent maintenance pace.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe behavior.

Security policy

The repository has no security policy. For a TYPO3 extension this reduces the clarity of vulnerability reporting and maintenance expectations, though it does not indicate abandonment by itself.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both referenced actions are unpinned. The missing top-level permissions block is ordinary; unpinned actions remain a supply-chain hygiene concern.