Package Health/liturgical-calendar/components

liturgical-calendar/components

Reusable frontend components for the Liturgical Calendar API

Latest v4.2.0

PackagistApache-2.0

82%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during dependency operations, creating some additional installation-time behavior to review even though the signal does not show harmful actions.

Security policy

No security policy was found, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap rather than evidence of abandonment.

Workflow audit

All three workflows were analyzed and all 11 action references are pinned, with no untrusted checkout or script-injection findings. However, a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow, and two workflows grant top-level write permissions, creating a meaningful automation-hygiene caveat.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Version	Published	Vulnerabilities
v4.2.0	10 Aug 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v4.1.0	10 Aug 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v4.0.0	10 Aug 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.3.1	10 Dec 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.3.0	19 Nov 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.2.1	18 Nov 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.2.0	17 Nov 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.1.9	4 Jan 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.1.8	3 Jan 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
v3.1.7	3 Jan 2025	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total

Maintainers

John R. D'Orazio

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
psr/cache Version ^3.0	—	—
nyholm/psr7 Version ^1.0	—	—
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—