saucebase/breadcrumbs

The package includes tests, release notes, a clear license, and a matching repository backed by an organization. Its workflows use four unpinned actions and lack a dedicated security policy, so build and transparency hygiene remain limited.

Latest v1.1.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is young at 184 days old and has only two releases, with a median interval of about 36 days. This provides limited evidence of long-term maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. For a package with only two releases, this leaves limited evidence of continuing maintenance.

Security policy

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although the package does have security scanning configured.

Workflow audit

Both workflows were fully analyzed with no auditor findings or untrusted checkout and injection issues. However, all four action references are unpinned, and one workflow grants top-level write permissions, creating build-hygiene concerns.