pollora/block-bindings

WordPress Block Bindings declared with attributes: a #[BlockBinding] class is a source, its methods are fields, and the post meta, term meta, author meta and options Pollora ships are ready to bind. Runs with or without Laravel.

Latest v0.1.0

Packagist

68%

Total Score

caution

A first release with no recent commit activity and six unpinned workflow actions keeps this package in the caution range.

Health Score Breakdown

Release history

This is the package's first release, published 0 days ago, so there is no release track record or established cadence to demonstrate stability.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months; because the package is brand new, this is more a lack of history than proof of abandonment, but it limits confidence.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest tooling gap for a package with WordPress and PHP runtime dependencies.

Version stability

v0.1.0 is not a stable major release, indicating an early API and compatibility stage despite not being marked as a prerelease.

Workflow audit

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Amphibee

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
pollora/colt Version ^10.0.1	—	—
pollora/hook Version ^2.0.1	—	—
pollora/meta Version ^0.1	—	—
psr/container Version ^2.0	—	—