Package Health/silverstripe/htmleditor-tinymce

silverstripe/htmleditor-tinymce

It includes tests, a changelog, clear licensing, and no install-time scripts. The beta release and unpinned workflow actions add avoidable risk, while recent releases and organization backing support continued maintenance.

Latest 1.2.0-beta1

Packagist

82%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

Only two commits were recorded in the last three months, which is modest activity, but the repository was pushed recently and other activity shows ongoing maintenance.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. This is a transparency and maintenance-hygiene gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency but is not by itself evidence of abandonment.

Version stability

This release is a beta while the latest listed version is stable 1.1.3, so consumers should expect more change than with a stable release. The recent prerelease share is notable but does not indicate abandonment.

Workflow audit

All seven analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, high-severity issue, or broad top-level write permissions, and all workflows were analyzed successfully.