sierratecnologia/hooks

The project has tests, a clear MIT license, organization backing, and security tooling. Its long release gap, absent recent commits, and unsafe workflow pinning create meaningful maintenance and build-transparency concerns.

Latest v1.0.11

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Workflow audit

All eight analyzed action references are unpinned, and the audit found a high-confidence high-severity unpinned container image. The workflows were fully analyzed and use no untrusted triggers or checkout sinks, which limits but does not remove the provenance concern.

Release history

The package has 20 releases, but none in the last 12 months and its latest release was in January 2024, indicating substantially slowed maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the absence of recent releases.

Version stability

The assessed version is presented as v1.0.11, while the collected latest registry version is 0.4.4; this inconsistency reduces release metadata confidence.