Package Health/pressbooks/frontend-tools

pressbooks/frontend-tools

The project has only one release and no commits or active contributors in the last three months. Organization backing, a matching repository, and a small dependency set provide useful support, but workflow permissions and unpinned actions need attention.

Latest 1.0.0

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published about 10 months ago, so there is little release history to establish sustained maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a package with only one release.

Repo tooling

Composer is used for the build, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow audit

All four action references are unpinned, and the audit found a high-severity, low-confidence cache-poisoning pattern plus a high-confidence secrets-inherit finding. The workflows were fully analyzed and have no untrusted checkout or script-injection findings, which limits the concern.