Package Health/sidworks/sw-plugin-database-sync

sidworks/sw-plugin-database-sync

Security coverage is thin, with no repository security policy or scanning tools, and the project has only two stars and one registry publisher. The package is small and clearly documented, with organization backing and a matching source repository.

Latest 1.0.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the assessed version was released recently.

Repo popularity

The repository has two stars, zero forks, and zero watchers. Low usage is supporting evidence rather than a verdict, but it provides little external validation or resilience.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. For a plugin that handles remote database synchronization, this leaves an avoidable quality and security-process gap.

Security policy

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, especially for a plugin handling SSH and database operations.

Workflow audit

No GitHub Actions workflows were present, so the audit found no workflow risks but also provides no evidence of automated testing, pinned build actions, or release checks. This is a limited process gap rather than a direct workflow hazard.