Package Health/roots/bedrock-disallow-indexing

roots/bedrock-disallow-indexing

Its MIT license, minimal runtime dependencies, and organization-backed repository make integration straightforward. The current release includes notes, but ongoing activity and workflow pinning deserve attention.

Latest 2.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases over about 6 years, with one release in the last 12 months. The recent release is encouraging, but the long interval indicates a thin maintenance cadence.

Repo commit activity

There were no commits from any active maintainer in the last 3 months. This is a meaningful maintenance concern, although the repository was recently pushed and the release itself is current.

Repo tooling

Composer is used for the build, but no security scanning tool is configured. For this small plugin this is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policy

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities.

Workflow audit

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 referenced actions are unpinned, leaving workflow behavior exposed to upstream changes.