marshmallow/seoable

The package is clearly documented and its repository remains active under organization backing. The single unpinned workflow action, absent security policy, and inconsistent reported version data leave modest transparency and build-reproducibility concerns.

Latest v5.2.1

Packagist

78%

Total Score

Maintainer Stability

100

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Nine runtime dependencies, including Laravel Nova and several related Marshmallow packages, create a relatively broad dependency surface for a framework integration and increase upgrade coupling.

Repo popularity

Five stars and one fork indicate limited adoption, but popularity is supporting evidence only and does not outweigh the package's active maintenance signals.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures unclear for a package integrated into application code.

Version stability

The release is marked as a stable major and not a prerelease, but the reported latest version is v3.5.3 while the assessed release is v5.2.1, an inconsistency that weakens metadata confidence.

Workflow audit

The sole workflow was fully analyzed with no audit findings or untrusted execution sinks. However, its one action is unpinned, which leaves a minor build-reproducibility and action-change risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Stef van Esch

Direct Dependencies

Dependency	Last Release	Score
laravel/nova Version ^5.0	—	—
marshmallow/commands Version ^1.0	—	—
marshmallow/mr-mallow Version ^1.0	—	—
marshmallow/translatable Version ^5.0	—	—
marshmallow/nova-flexible Version ^5.0	—	—