rockettheme/toolbox

Clear documentation, tests, and release notes make this package easy to evaluate. The organization provides some maintenance continuity, but recent work is concentrated in one contributor and workflow actions are unpinned. No security policy is published.

Latest 2.0.1

Packagist

76%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 5 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 10 issues and 2 pull requests remain open; this suggests limited community activity but not abandonment given recent commits and releases.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected, leaving a modest project-hygiene gap.

Security policy

The repository has no published security policy, making vulnerability-reporting expectations less transparent.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, so their supply-chain versions are not fixed.