nails/module-testimonial

The repository has tests, a changelog, and active organizational ownership. However, this release is the sole publication from 2018, while the current workflow audit finds all 10 actions unpinned and two high-confidence template-injection findings.

Latest 0.1.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has one release, published about eight years ago, with no releases in the last 12 months. That leaves little evidence of a maintained release stream.

Repo commit activity

Only one commit came from one active maintainer in the last three months. Recent activity exists, but it is too sparse to demonstrate a strong maintenance cadence.

Security policy

The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the code is unsafe.

Version stability

Version 0.1.0 is not a stable major version, although it is not marked as a prerelease. The early version increases uncertainty for a dependency with only one release.

Workflow audit

All 10 analyzed action references are unpinned, and the audit reports two high-confidence template-injection findings in a migration workflow. The workflows use no dangerous untrusted triggers or writable top-level tokens, which limits the severity, but the automation still needs remediation.