Package Health/sbuerk/checkout-path-repository

sbuerk/checkout-path-repository

The package includes clear documentation, repository tests, release notes, and a small runtime dependency surface. Workflow hygiene is weak, with all eight actions unpinned and two high-confidence template-injection findings; the single-maintainer project also has little demonstrated history.

Latest 1.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry maintainer is consistent with a small user-owned project, but it provides limited visible maintainer depth for a new dependency.

Release history

This is the package's first release, published today, so there is no meaningful release track record or evidence of sustained maintenance yet.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tool was detected; this is a modest transparency gap rather than a severe risk.

Security policy

No security policy is present in the repository, leaving vulnerability-reporting expectations unspecified.

Workflow audit

All eight analyzed action uses are unpinned, and the publish workflow has two high-confidence template-injection findings plus top-level write permissions. No untrusted checkout or script-injection trigger was detected, so this is a workflow hygiene concern rather than a severe standalone risk.