Package Health/plain/kirby-files-from-url

plain/kirby-files-from-url

The project has a clear MIT license, a matching repository, and a documented installation path. Maintenance has paused for about two months, while the repository lacks security scanning and its single workflow uses an unpinned action.

Latest 2.1.9

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the current maintenance pause is a meaningful concern.

Repo tooling

Composer is used for build or package handling, but no security scanning tools are configured, leaving a repository hygiene gap.

Security policy

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow audit

The only workflow was fully analyzed with no audit findings or untrusted sinks, but its one action reference is unpinned. The missing top-level permissions block is acceptable on its own.