Package Health/netgen/layouts-ezplatform-site-api

netgen/layouts-ezplatform-site-api

The package has solid tests, clear licensing, and organization backing. Maintenance has slowed, and workflows use unpinned images and actions without a security policy, leaving avoidable upkeep and build-integrity concerns.

Latest 1.4.5

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 15 releases over roughly eight years with a median interval of about 78 days, but it has had no release in the last 12 months. That indicates substantially slowed maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Although it was pushed in July 2025, the recent activity gap lowers confidence in ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest repository hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations.

Workflow audit

All three workflows were analyzed with no untrusted triggers or script injection, but all six action uses are unpinned and the audit found a high-confidence unpinned container image. This creates avoidable build-integrity risk.