Package Health/ralphjsmit/pest-plugin-filesystem

ralphjsmit/pest-plugin-filesystem

The source repository has tests, a changelog, and release notes, while the package is licensed and uses no install-time scripts. If you adopt it, pin the exact version and review its unpinned CI actions.

Latest 1.2.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in February 2023, with no releases in the past 12 months despite the package being over four years old. This is a meaningful maintenance concern, although the repository remains unarchived and has a release note for this version.

Repo commit activity

The repository had zero commits and zero active maintainers in the past three months, consistent with a long period of limited visible maintenance. The repository was last pushed in March 2024, which provides some evidence it was maintained previously but does not offset the current inactivity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the repository does include tests and a changelog.

Workflow audit

All 5 of 5 analyzed action references are unpinned, creating avoidable build reproducibility and action-update risk. However, both workflows were fully analyzed, had no dangerous triggers or untrusted checkouts, and produced no audit findings, so this is a hygiene concern rather than a severe risk.