silverstripe/standards

The repository is backed by an organization, has tests, clear licensing, and a recent release with documented changes. Recent development is quiet, and all four workflow action references are unpinned, leaving meaningful maintenance and build-integrity concerns.

Latest 1.2.3

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has six releases over about 2 years and 1 release in the last 12 months, with a median interval of about 136 days. This indicates an established but relatively slow release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a meaningful sign of currently quiet maintenance, although the January 2026 release and organizational backing provide some compensation.

Repo tooling

Composer is used for the build, but no security-scanning tools are reported. The missing scanning layer is a modest transparency and maintenance concern.

Security policy

The repository has no security policy. That makes vulnerability reporting and response expectations less clear for adopters.

Workflow audit

All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings, and three use read-only permissions. However, all four action references are unpinned, which weakens build reproducibility and supply-chain integrity.