Package Health/silverstripe-terraformers/embargo-expiry

silverstripe-terraformers/embargo-expiry

Clear licensing, release notes, repository tests, and Dependabot improve transparency. Organization backing is reassuring, but the small project shows limited recent activity and weak workflow pinning, so pin this version carefully.

Latest 3.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months. This is a meaningful maintenance warning, even though the repository was recently pushed and version 3.0.0 was released.

Repo issue activity

There were no new or closed issues or pull requests in the past month, while eight issues and two pull requests remain open. Together with the absent recent commits, this suggests limited current responsiveness.

Repo package mention

The repository name does not exactly match the package name and its README does not mention the full package name. The mismatch may be normal for a sub-package, but the absent README mention weakens package-to-repository transparency.

Security policy

The repository has no security policy file. That is a transparency gap for a maintained dependency, though the available tooling and other repository documentation partly compensate.

Workflow audit

All seven workflows were analyzed successfully, six use read-only permissions, and no dangerous audit findings were reported. However, all seven action references are unpinned, leaving avoidable workflow supply-chain exposure.