plesk/wappspector

The Apache-2.0 license, substantial README, release notes, and organization-backed repository make the package transparent and straightforward to evaluate. Pin this release and watch for renewed commit activity.

Latest 0.2.10

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 3 years with 20 releases, but only 2 releases in the last 12 months. The release published today provides some evidence of ongoing maintenance, though the recent cadence is modest.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. A release published today partly offsets this, but the absence of recent commit activity leaves maintenance continuity uncertain.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe to depend on.

Workflow audit

Both workflows were fully analyzed with no high- or medium-confidence audit findings and no untrusted checkout or script-injection paths. However, all 7 action references are unpinned, leaving avoidable workflow supply-chain exposure.