maicol07/blade-mdi

The package includes clear documentation, a license, repository tests, and a changelog. Its single-release history and absent recent commits make future fixes uncertain; CI also has low-confidence cache-poisoning hygiene.

Latest 1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about two years ago, with no releases in the last 12 months. That leaves little evidence of an ongoing release process.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the package's single-release history, this raises the risk that fixes may not arrive promptly.

Repo tooling

Composer is used as the build tool, but no security scanning tool is reported. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For a small icon component this is a limited gap, but it reduces clarity about how vulnerabilities would be reported.

Workflow audit

All three workflow action references are unpinned, and the audit found a low-confidence cache-poisoning pattern. The workflow has no untrusted checkout or script-injection findings, so this is a hygiene caution rather than a severe risk.